Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,214
Actively exploited
296
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,214 entries High Hide N/A Clear all
CVE
CVE-2025-10200
HIGH 8.8

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a craf…

CVE-2025-54910
HIGH 8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-54908
HIGH 7.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-54907
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2025-54905
HIGH 7.1

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2025-54904
HIGH 7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54903
HIGH 7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54902
HIGH 7.8

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54900
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54899
HIGH 7.8

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54898
HIGH 7.8

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54896
HIGH 7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54116
HIGH 7.3

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

CVE-2025-54108
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz…

CVE-2025-54105
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to…

CVE-2025-59220
HIGH · vendor

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-55234
HIGH · vendor

Windows SMB Elevation of Privilege Vulnerability

CVE-2025-55225
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-55223
HIGH · vendor

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-54919
HIGH · vendor

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-54917
HIGH · vendor

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-54916
HIGH · vendor

Windows NTFS Remote Code Execution Vulnerability

CVE-2025-54915
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54913
HIGH · vendor

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

CVE-2025-54912
HIGH · vendor

Windows BitLocker Elevation of Privilege Vulnerability

CVE-2025-54911
HIGH · vendor

Windows BitLocker Elevation of Privilege Vulnerability

CVE-2025-54895
HIGH · vendor

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

CVE-2025-54894
HIGH · vendor

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2025-54115
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54114
HIGH · vendor

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54113
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-54112
HIGH · vendor

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-54111
HIGH · vendor

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

CVE-2025-54110
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-54109
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54107
HIGH · vendor

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-54106
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-54104
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54103
HIGH · vendor

Windows Management Service Elevation of Privilege Vulnerability

CVE-2025-54102
HIGH · vendor

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54101
HIGH · vendor

Windows SMB Client Remote Code Execution Vulnerability

CVE-2025-54099
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-54098
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54097
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54096
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54095
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54094
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54093
HIGH · vendor

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2025-54092
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54091
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM