Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-11822
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11821
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11299
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11294
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11291
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11271
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-17772
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10044
HIGH 8.8
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying … |
|
CVE-2019-9970
MEDIUM 6.5
Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homogr… |
|
CVE-2019-9948
CRITICAL 9.1
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist … |
|
CVE-2019-9947
MEDIUM 6.1
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a u… |
|
CVE-2019-9936
HIGH 7.5
In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lea… |
|
CVE-2019-3855
HIGH 8.8
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remot… |
|
CVE-2019-9740
MEDIUM 6.1
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a u… |
|
CVE-2019-5922
HIGH 7.8
Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified director… |
|
CVE-2019-0821
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2019-0797
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0784
CRITICAL · vendor
Windows ActiveX Remote Code Execution Vulnerability |
|
CVE-2019-0782
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0776
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0775
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0774
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0772
HIGH · vendor
Windows VBScript Engine Remote Code Execution Vulnerability |
|
CVE-2019-0767
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0766
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0765
HIGH · vendor
Comctl32 Remote Code Execution Vulnerability |
|
CVE-2019-0759
HIGH · vendor
Windows Print Spooler Information Disclosure Vulnerability |
|
CVE-2019-0756
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0755
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0754
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-0726
CRITICAL · vendor
Windows DHCP Client Remote Code Execution Vulnerability |
|
CVE-2019-0704
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2019-0703
Windows SMB Information Disclosure Vulnerability |
|
CVE-2019-0702
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0701
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0698
CRITICAL · vendor
Windows DHCP Client Remote Code Execution Vulnerability |
|
CVE-2019-0697
CRITICAL · vendor
Windows DHCP Client Remote Code Execution Vulnerability |
|
CVE-2019-0696
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-0695
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-0694
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0693
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0692
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0690
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0689
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0683
HIGH · vendor
Active Directory Elevation of Privilege Vulnerability |
|
CVE-2019-0682
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0617
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0614
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0603
CRITICAL · vendor
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability |
|
CVE-2019-9636
CRITICAL 9.8
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. T… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.