Vulnerabilities
Tracked app vulnerabilities
29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,911
- Actively exploited
- 377
- Publication window
- 1997-01-01 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-0032
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0031
HIGH 7.8
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial o… |
|
CVE-2017-0030
HIGH 7.8
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on ShareP… |
|
CVE-2017-0029
MEDIUM 5.5
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted … |
|
CVE-2017-0027
MEDIUM 4.7
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow … |
|
CVE-2017-0023
HIGH 7.5
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a… |
|
CVE-2017-0020
HIGH 7.8
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial… |
|
CVE-2017-0019
HIGH 7.8
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O… |
|
CVE-2017-0017
MEDIUM 6.1
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via … |
|
CVE-2017-0015
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0012
MEDIUM 4.3
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi… |
|
CVE-2017-0011
MEDIUM 4.3
Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This … |
|
CVE-2017-0010
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0006
HIGH 7.8
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
|
CVE-2016-10196
HIGH 7.5
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service … |
|
CVE-2017-0148
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0147
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0146
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0143
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0121
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0118
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0109
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0104
CRITICAL · vendor
iSNS Server Memory Corruption Vulnerability |
|
CVE-2017-0102
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0100
HIGH · vendor
Windows COM Session Elevation of Privilege Vulnerability |
|
CVE-2017-0099
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0098
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0097
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0096
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-0095
HIGH · vendor
Hyper-V vSMB Remote Code Execution Vulnerability |
|
CVE-2017-0084
CRITICAL · vendor
Windows Uniscribe Remote Code Execution Vulnerability |
|
CVE-2017-0082
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0081
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0080
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0079
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0078
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0076
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0075
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0074
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0073
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0063
HIGH · vendor
Microsoft Color Management Information Disclosure Vulnerability |
|
CVE-2017-0062
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0060
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0057
HIGH · vendor
Windows DNS Query Information Disclosure Vulnerability |
|
CVE-2017-0056
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-0055
HIGH · vendor
Microsoft IIS Server XSS Elevation of Privilege Vulnerability |
|
CVE-2017-0051
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0050
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0047
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2017-0043
HIGH · vendor
Microsoft Active Directory Federation Services Information Disclosure |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.