Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

20 991 CVE touchent une app ou un OS suivi (toutes sévérités, Windows). 304 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
20 991
Activement exploitées
304
Fenêtre de publication
1997-01-01 → 2026-11-10

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

20 991 entrées Windows Tout effacer
CVE
CVE-2026-96133
MEDIUM 5.5

Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96129
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96127
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96126
HIGH 7.8

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96124
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96122
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96117
HIGH 7.8

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-96115
HIGH 8.0

Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-96112
MEDIUM 5.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

CVE-2026-96110
MEDIUM 5.5

Use after free in Windows OLE allows an authorized attacker to disclose information locally.

CVE-2026-96107
HIGH 7.0

Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96103
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96102
HIGH 7.8

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96101
MEDIUM 5.5

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l…

CVE-2026-96097
HIGH 7.0

Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96093
MEDIUM 4.7

Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.

CVE-2026-96088
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho…

CVE-2026-96086
MEDIUM 6.5

Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-96085
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96084
HIGH 7.8

Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

CVE-2026-96082
MEDIUM 6.5

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

CVE-2026-96078
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-96077
HIGH 7.5

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-96076
HIGH 7.8

Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.

CVE-2026-96075
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr…

CVE-2026-96074
HIGH 7.8

Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96073
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96072
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-96067
CRITICAL 9.8

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-96066
HIGH 7.8

Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96062
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96061
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96060
HIGH 7.8

Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96059
MEDIUM 5.5

Use after free in HID class driver allows an authorized attacker to disclose information locally.

CVE-2026-96058
MEDIUM 4.6

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-96057
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96056
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96055
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96053
HIGH 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg…

CVE-2026-96052
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96051
HIGH 7.0

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96048
MEDIUM 4.7

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96047
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96046
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96043
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96042
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96041
MEDIUM 5.5

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

CVE-2026-96038
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96037
HIGH 7.8

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96036
HIGH 7.8

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa