Vulnerabilities
Tracked app vulnerabilities
27,631 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,631
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-118148
CRITICAL · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-118146
CRITICAL · vendor
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
|
CVE-2026-118145
CRITICAL · vendor
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
|
CVE-2026-118144
HIGH · vendor
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-118143
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-118142
HIGH · vendor
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2026-118141
HIGH · vendor
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-118140
HIGH · vendor
Server for NFS Information Disclosure Vulnerability |
|
CVE-2026-118138
HIGH · vendor
Windows Client for NFS Elevation of Privilege Vulnerability |
|
CVE-2026-118126
HIGH · vendor
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-118125
HIGH · vendor
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-118124
HIGH · vendor
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-118123
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-116714
HIGH · vendor
Windows AppX Deployment Service Elevation of Privilege Vulnerability |
|
CVE-2026-116710
CRITICAL · vendor
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-116707
HIGH · vendor
Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability |
|
CVE-2026-116706
HIGH · vendor
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-116700
HIGH · vendor
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-116699
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-116698
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-116697
HIGH · vendor
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability |
|
CVE-2026-114170
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-113865
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113864
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113863
HIGH · vendor
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2026-113862
CRITICAL · vendor
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-113861
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113860
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113859
CRITICAL · vendor
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-113856
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113855
HIGH · vendor
Windows DNS Remote Code Execution Vulnerability |
|
CVE-2026-113848
HIGH · vendor
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-113847
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-113844
HIGH · vendor
Windows NTFS Tampering Vulnerability |
|
CVE-2026-113842
HIGH · vendor
Windows Security Center Elevation of Privilege Vulnerability |
|
CVE-2026-113825
CRITICAL · vendor
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
|
CVE-2026-113821
HIGH · vendor
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
|
CVE-2026-113820
HIGH · vendor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-113819
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113818
HIGH · vendor
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-113817
HIGH · vendor
Windows Devices Human Interface Elevation of Privilege Vulnerability |
|
CVE-2026-113816
HIGH · vendor
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-113815
HIGH · vendor
Microsoft PowerShell Security Feature Bypass Vulnerability |
|
CVE-2026-113814
HIGH · vendor
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-113772
HIGH · vendor
Windows Redirected Drive Buffering Information Disclosure Vulnerability |
|
CVE-2026-113771
HIGH · vendor
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
|
CVE-2026-113770
HIGH · vendor
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113769
HIGH · vendor
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113768
HIGH · vendor
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-113767
HIGH · vendor
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.