Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

27 656 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 374 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
27 656
Activement exploitées
374
Fenêtre de publication
1997-01-01 → 2026-10-15

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

27 656 entrées
CVE
CVE-2026-27915
HIGH 7.8

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27914
HIGH 7.8

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

CVE-2026-27911
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to ele…

CVE-2026-27910
HIGH 7.8

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-27909
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-27908
HIGH 7.0

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-27907
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-27906
MEDIUM 4.4

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-26184
HIGH 7.8

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-26182
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-26181
HIGH 7.8

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-26180
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-26179
HIGH 7.8

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-26178
HIGH 8.8

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.

CVE-2026-26177
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-26176
HIGH 7.8

Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-26175
MEDIUM 4.6

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-26174
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to e…

CVE-2026-26173
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

CVE-2026-26172
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-26170
HIGH 7.8

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVE-2026-26169
MEDIUM 6.1

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

CVE-2026-26167
HIGH 8.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-26166
HIGH 7.0

Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-26165
HIGH 7.0

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-26163
HIGH 7.8

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-26162
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-26161
HIGH 7.8

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-26160
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

CVE-2026-26159
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

CVE-2026-26156
HIGH 7.8

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-26155
MEDIUM 6.5

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2026-26153
HIGH 7.8

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-26152
HIGH 7.0

Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-26151
HIGH 7.1

Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-25184
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized…

CVE-2026-23670
MEDIUM 5.7

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVE-2026-20930
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20928
MEDIUM 4.6

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security…

CVE-2026-20806
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.

CVE-2026-32219
HIGH · éditeur

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2026-32216
HIGH · éditeur

Windows Redirected Drive Buffering System Denial of Service Vulnerability

CVE-2026-32195
HIGH · éditeur

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-32080
HIGH · éditeur

Windows WalletService Elevation of Privilege Vulnerability

CVE-2026-27928
HIGH · éditeur

Windows Hello Security Feature Bypass Vulnerability

CVE-2026-27913
HIGH · éditeur

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2026-27912
HIGH · éditeur

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2026-26183
HIGH · éditeur

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

CVE-2026-26168
HIGH · éditeur

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-26154
HIGH · éditeur

Windows Server Update Service (WSUS) Tampering Vulnerability

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa