Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

6,362 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
6,362
Actively exploited
33
Publication window
2009-07-30 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,362 entries Medium Hide N/A Clear all
CVE
CVE-2026-97829
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97828
MEDIUM 6.5

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97827
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97826
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97824
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97822
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97820
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97819
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97817
MEDIUM 6.5

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97813
MEDIUM 6.5

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-97790
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p…

CVE-2026-96948
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio…

CVE-2026-96944
MEDIUM 5.5

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall…

CVE-2026-96938
MEDIUM 6.7

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96935
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96930
MEDIUM 5.5

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-96927
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96926
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-96925
MEDIUM 5.5

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96921
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo…

CVE-2026-96910
MEDIUM 5.5

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-96865
MEDIUM 5.6

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information …

CVE-2026-96863
MEDIUM 6.8

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96860
MEDIUM 5.5

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96859
MEDIUM 5.5

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-96858
MEDIUM 5.5

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96857
MEDIUM 5.5

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-96855
MEDIUM 5.5

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96854
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local…

CVE-2026-96853
MEDIUM 4.7

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96851
MEDIUM 5.5

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-96850
MEDIUM 5.5

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

CVE-2026-96849
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96848
MEDIUM 5.5

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96846
MEDIUM 5.5

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-96321
MEDIUM 5.5

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

CVE-2026-96316
MEDIUM 5.5

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96315
MEDIUM 5.5

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

CVE-2026-96314
MEDIUM 5.5

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-96311
MEDIUM 5.5

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-96300
MEDIUM 5.9

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

CVE-2026-96247
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96218
MEDIUM 5.5

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

CVE-2026-96183
MEDIUM 5.5

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-95904
MEDIUM 5.5

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-88226
MEDIUM 4.6

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-88162
MEDIUM 5.5

Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM