Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-8179
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8178
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerabilit… |
|
CVE-2018-8177
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution … |
|
CVE-2018-8163
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur… |
|
CVE-2018-8162
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8161
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office R… |
|
CVE-2018-8148
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8147
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8145
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2018-8139
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8137
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8133
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8130
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8128
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8123
MEDIUM 4.3
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili… |
|
CVE-2018-8112
MEDIUM 4.3
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas… |
|
CVE-2018-1025
MEDIUM 4.3
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclos… |
|
CVE-2018-1022
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-1021
MEDIUM 4.3
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili… |
|
CVE-2018-0954
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-0953
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0951
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0946
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0945
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0943
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8897
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8170
HIGH · vendor
Windows Image Elevation of Privilege Vulnerability |
|
CVE-2018-8167
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2018-8166
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-8165
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8164
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-8142
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-8141
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8136
LOW · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2018-8134
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8132
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-8129
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-8127
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8124
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-0961
CRITICAL · vendor
Hyper-V vSMB Remote Code Execution Vulnerability |
|
CVE-2018-0959
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2018-0958
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-0854
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-0824
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2018-10229
MEDIUM 4.8
A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API. |
|
CVE-2018-10115
HIGH 7.8
Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a… |
|
CVE-2018-5850
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5846
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5845
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.