Vulnerabilities
Tracked app vulnerabilities
29,086 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,086
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-8545
MEDIUM 6.5
A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability". |
|
CVE-2017-8530
MEDIUM 5.4
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with maliciou… |
|
CVE-2017-8529
MEDIUM 6.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to d… |
|
CVE-2017-8524
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
|
CVE-2017-8523
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with maliciou… |
|
CVE-2017-8522
HIGH 7.5
Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allo… |
|
CVE-2017-8521
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8520
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8513
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Re… |
|
CVE-2017-8512
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8510
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8509
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8508
A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Secur… |
|
CVE-2017-8507
A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corrupt… |
|
CVE-2017-8506
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8504
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch … |
|
CVE-2017-8499
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8498
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XM… |
|
CVE-2017-8497
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
|
CVE-2017-8496
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
|
CVE-2017-0292
HIGH 7.8
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code exec… |
|
CVE-2017-0663
HIGH 7.8
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unp… |
|
CVE-2017-8579
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2017-8576
HIGH · vendor
Microsoft Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2017-8575
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2017-8554
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8553
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8544
HIGH · vendor
Windows Search Information Disclosure Vulnerability |
|
CVE-2017-8543
Windows Search Remote Code Execution Vulnerability |
|
CVE-2017-8533
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8532
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8531
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8527
CRITICAL · vendor
Win32k Graphics Remote Code Execution Vulnerability |
|
CVE-2017-8515
HIGH · vendor
Windows VAD Cloning Denial of Service Vulnerability |
|
CVE-2017-8494
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-8493
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2017-8492
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8491
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8490
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8489
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8485
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8484
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8483
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8482
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8481
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8480
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8479
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8478
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8477
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8476
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.