Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,214
Actively exploited
296
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,214 entries High Hide N/A Clear all
CVE
CVE-2026-32155
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-32154
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-32153
HIGH 7.8

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-32152
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-32150
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta…

CVE-2026-32149
HIGH 7.3

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-32093
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta…

CVE-2026-32091
HIGH 8.4

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker …

CVE-2026-32090
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to ele…

CVE-2026-32089
HIGH 7.8

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

CVE-2026-32087
HIGH 7.0

Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-32086
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta…

CVE-2026-32083
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr…

CVE-2026-32082
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr…

CVE-2026-32080
HIGH 7.0

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-32078
HIGH 7.8

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-32077
HIGH 7.8

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-32076
HIGH 7.8

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-32075
HIGH 7.0

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-32074
HIGH 7.8

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-32073
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-32071
HIGH 7.5

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

CVE-2026-32070
HIGH 7.0

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-32069
HIGH 7.8

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-32068
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr…

CVE-2026-27929
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-27928
HIGH 8.7

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-27927
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to e…

CVE-2026-27926
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized atta…

CVE-2026-27924
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-27923
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-27922
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-27921
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg…

CVE-2026-27920
HIGH 7.8

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27919
HIGH 7.8

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27918
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privilege…

CVE-2026-27917
HIGH 7.0

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-27916
HIGH 7.8

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27915
HIGH 7.8

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-27914
HIGH 7.8

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

CVE-2026-27913
HIGH 7.7

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-27912
HIGH 8.0

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-27911
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to ele…

CVE-2026-27910
HIGH 7.8

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-27909
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-27908
HIGH 7.0

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-27907
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-26184
HIGH 7.8

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-26183
HIGH 7.8

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

CVE-2026-26182
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM