Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-13259
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13258
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13257
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13256
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13255
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13253
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13252
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13251
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13250
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13249
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13248
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2016-10393
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-15817
HIGH 7.8
In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host dr… |
|
CVE-2017-7376
CRITICAL 9.8
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects. |
|
CVE-2017-7375
CRITICAL 9.8
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, exte… |
|
CVE-2018-0861
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in mem… |
|
CVE-2018-0860
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0859
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0857
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0856
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, ak… |
|
CVE-2018-0852
HIGH 8.8
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (… |
|
CVE-2018-0851
HIGH 8.8
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft … |
|
CVE-2018-0850
MEDIUM 6.5
Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of pr… |
|
CVE-2018-0840
HIGH 7.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… |
|
CVE-2018-0839
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosur… |
|
CVE-2018-0838
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0837
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0836
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, ak… |
|
CVE-2018-0835
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0834
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0771
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests,… |
|
CVE-2018-0763
LOW 3.1
Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information … |
|
CVE-2018-0847
HIGH · vendor
Windows Scripting Engine Memory Corruption Vulnerability |
|
CVE-2018-0846
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2018-0844
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2018-0843
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0842
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0832
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0831
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0830
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0829
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0828
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0827
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-0826
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2018-0825
CRITICAL · vendor
StructuredQuery Remote Code Execution Vulnerability |
|
CVE-2018-0823
HIGH · vendor
Named Pipe File System Elevation of Privilege Vulnerability |
|
CVE-2018-0822
HIGH · vendor
Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability |
|
CVE-2018-0821
HIGH · vendor
Windows AppContainer Elevation Of Privilege Vulnerability |
|
CVE-2018-0820
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0809
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.