Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-6036
MEDIUM 6.5
Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page. |
|
CVE-2018-6035
HIGH 8.8
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a cr… |
|
CVE-2018-6034
HIGH 8.1
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
|
CVE-2018-6033
HIGH 8.8
Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox v… |
|
CVE-2018-6032
MEDIUM 6.5
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra… |
|
CVE-2018-6031
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2018-14647
HIGH 7.5
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a… |
|
CVE-2018-10496
HIGH 8.8
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User in… |
|
CVE-2018-1000802
CRITICAL 9.8
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') … |
|
CVE-2018-8469
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8467
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8466
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8465
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8464
HIGH 7.5
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Executio… |
|
CVE-2018-8463
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8459
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
|
CVE-2018-8457
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8456
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
|
CVE-2018-8452
MEDIUM 4.3
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engin… |
|
CVE-2018-8430
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability.… |
|
CVE-2018-8429
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur… |
|
CVE-2018-8425
MEDIUM 4.3
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microso… |
|
CVE-2018-8367
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8366
LOW 3.1
An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information … |
|
CVE-2018-8354
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8331
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8315
MEDIUM 4.2
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Di… |
|
CVE-2018-6976
MEDIUM 5.3
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted file… |
|
CVE-2018-8475
CRITICAL · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2018-8468
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8462
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8455
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8449
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-8446
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8445
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8443
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8442
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8441
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2018-8440
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2018-8439
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2018-8438
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8437
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8436
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8435
HIGH · vendor
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2018-8434
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-8433
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2018-8424
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2018-8420
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2018-8419
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8410
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.