Vulnerabilities
Tracked app vulnerabilities
18,765 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,765
- Actively exploited
- 304
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-105530
HIGH · vendor
Windows System Events Broker Information Disclosure Vulnerability |
|
CVE-2026-105529
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-105528
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-105527
HIGH · vendor
Windows Encrypting File System (EFS) Denial of Service Vulnerability |
|
CVE-2026-105526
HIGH · vendor
Winsock Elevation of Privilege Vulnerability |
|
CVE-2026-105525
HIGH · vendor
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-105524
HIGH · vendor
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105522
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-105520
HIGH · vendor
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-105518
HIGH · vendor
Windows iSCSI Remote Code Execution Vulnerability |
|
CVE-2026-105515
HIGH · vendor
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-105513
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105512
HIGH · vendor
Microsoft QUIC Denial of Service Vulnerability |
|
CVE-2026-105511
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-105510
HIGH · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
|
CVE-2026-105509
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2026-105507
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105506
HIGH · vendor
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-105505
HIGH · vendor
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2026-105504
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105503
HIGH · vendor
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105501
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105499
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105498
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105497
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105496
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105495
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105493
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105492
HIGH · vendor
Microsoft Remote Registry Service Denial of Service Vulnerability |
|
CVE-2026-105491
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105490
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105028
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-105026
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105025
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105024
HIGH · vendor
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-105023
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105022
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105021
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105020
HIGH · vendor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105018
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2026-105017
HIGH · vendor
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-103571
HIGH · vendor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2026-102868
HIGH · vendor
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-102219
HIGH · vendor
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-102200
HIGH · vendor
Windows NTFS Tampering Vulnerability |
|
CVE-2026-100223
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-120931
CRITICAL 9.6
Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via … |
|
CVE-2026-120930
MEDIUM 5.4
Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromi… |
|
CVE-2026-121257
CRITICAL 9.6
Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr… |
|
CVE-2026-121256
HIGH 8.3
Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execu… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.