Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-5798
MEDIUM 6.5
Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted … |
|
CVE-2019-5796
HIGH 7.5
Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2019-5795
HIGH 8.8
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
|
CVE-2019-5794
MEDIUM 6.5
Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafte… |
|
CVE-2019-5793
MEDIUM 6.5
Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user int… |
|
CVE-2019-5792
HIGH 8.8
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
|
CVE-2019-5791
HIGH 8.8
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML pa… |
|
CVE-2019-5790
HIGH 8.8
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbi… |
|
CVE-2019-5789
HIGH 8.8
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised t… |
|
CVE-2019-5788
HIGH 8.8
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromis… |
|
CVE-2019-5787
HIGH 8.8
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2019-0953
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2019-0940
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
|
CVE-2019-0938
CRITICAL 9.0
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Micr… |
|
CVE-2019-0937
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0933
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0932
HIGH · vendor
An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'. |
|
CVE-2019-0927
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0926
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
|
CVE-2019-0925
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0924
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0923
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0922
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0917
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0916
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0915
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0914
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0913
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0912
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0911
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2019-0884
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2019-5598
HIGH 7.5
In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in … |
|
CVE-2019-0961
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0942
HIGH · vendor
Unified Write Filter Elevation of Privilege Vulnerability |
|
CVE-2019-0936
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0931
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0903
GDI+ Remote Code Execution Vulnerability |
|
CVE-2019-0902
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0901
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0900
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0899
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0898
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0897
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0896
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0895
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0894
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0893
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0892
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0891
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0890
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.