Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-9795
CRITICAL 9.8
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially ex… |
|
CVE-2019-9794
CRITICAL 9.8
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This cou… |
|
CVE-2019-9793
MEDIUM 5.9
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnera… |
|
CVE-2019-9792
CRITICAL 9.8
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then b… |
|
CVE-2019-9791
CRITICAL 9.8
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just… |
|
CVE-2019-9790
CRITICAL 9.8
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still… |
|
CVE-2019-9788
CRITICAL 9.8
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed e… |
|
CVE-2018-18513
HIGH 7.5
A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) atta… |
|
CVE-2018-18512
CRITICAL 9.8
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although th… |
|
CVE-2018-18509
MEDIUM 5.3
A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message… |
|
CVE-2019-0861
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0860
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0833
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft Edge Information Disclosure Vulnerabili… |
|
CVE-2019-0829
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0828
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-0812
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0810
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0806
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0764
MEDIUM 6.5
A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerabil… |
|
CVE-2019-0739
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0879
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0877
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0859
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0856
HIGH · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2019-0853
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2019-0851
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0849
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0848
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0847
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0846
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0845
CRITICAL · vendor
Windows IOleCvt Interface Remote Code Execution Vulnerability |
|
CVE-2019-0844
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0842
HIGH · vendor
Windows VBScript Engine Remote Code Execution Vulnerability |
|
CVE-2019-0841
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0840
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0839
HIGH · vendor
Windows Information Disclosure Vulnerability |
|
CVE-2019-0838
HIGH · vendor
Windows Information Disclosure Vulnerability |
|
CVE-2019-0837
HIGH · vendor
DirectX Information Disclosure Vulnerability |
|
CVE-2019-0836
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0814
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0805
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0803
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0802
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0796
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0795
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0794
HIGH · vendor
OLE Automation Remote Code Execution Vulnerability |
|
CVE-2019-0793
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0792
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0791
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0790
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.