Vulnerabilities
Tracked app vulnerabilities
6,362 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,362
- Actively exploited
- 33
- Publication window
- 2009-07-30 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-97829
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97828
MEDIUM 6.5
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97827
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97826
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97825
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97824
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97823
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97822
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97821
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97820
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97819
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97817
MEDIUM 6.5
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97813
MEDIUM 6.5
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97790
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p… |
|
CVE-2026-96948
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
|
CVE-2026-96944
MEDIUM 5.5
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
|
CVE-2026-96938
MEDIUM 6.7
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96935
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96930
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96927
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96926
MEDIUM 5.5
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96925
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96921
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo… |
|
CVE-2026-96910
MEDIUM 5.5
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96865
MEDIUM 5.6
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information … |
|
CVE-2026-96863
MEDIUM 6.8
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96860
MEDIUM 5.5
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96859
MEDIUM 5.5
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96858
MEDIUM 5.5
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96857
MEDIUM 5.5
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-96855
MEDIUM 5.5
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96854
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local… |
|
CVE-2026-96853
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-96851
MEDIUM 5.5
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-96850
MEDIUM 5.5
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96849
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-96848
MEDIUM 5.5
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-96846
MEDIUM 5.5
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
|
CVE-2026-96321
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96316
MEDIUM 5.5
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96315
MEDIUM 5.5
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96314
MEDIUM 5.5
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96311
MEDIUM 5.5
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96300
MEDIUM 5.9
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96247
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-96218
MEDIUM 5.5
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96183
MEDIUM 5.5
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-95904
MEDIUM 5.5
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88226
MEDIUM 4.6
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-88162
MEDIUM 5.5
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.