Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

7,765 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
7,765
Actively exploited
213
Publication window
2007-08-28 → 2026-08-19

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

7,765 entries Windows Hide N/A Clear all
CVE
CVE-2026-8950
HIGH 9.3 1 app

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird …

CVE-2026-8949
HIGH 7.5 1 app

Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVE-2026-8948
CRITICAL 9.1 1 app

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8947
HIGH 7.3 1 app

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, a…

CVE-2026-8946
HIGH 7.5 1 app

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Th…

CVE-2025-54518
HIGH 7.0

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a dif…

CVE-2026-41088
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-40414
HIGH 7.4

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40413
HIGH 7.4

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40401
HIGH 7.1

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40399
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg…

CVE-2026-40397
HIGH 7.8

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40369
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-35417
HIGH 7.8

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-35416
HIGH 7.0

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-34345
HIGH 7.0

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-34336
HIGH 7.8

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-34330
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…

CVE-2026-33841
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-33840
HIGH 7.8

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-32170
MEDIUM 6.7

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2026-42896
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-42825
HIGH 7.0

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-41097
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2026-41096
CRITICAL 9.8

Windows DNS Client Remote Code Execution Vulnerability

CVE-2026-41095
HIGH 7.8

Data Deduplication Elevation of Privilege Vulnerability

CVE-2026-41089
CRITICAL 9.8

Windows Netlogon Remote Code Execution Vulnerability

CVE-2026-40415
HIGH 8.1

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2026-40410
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-40408
HIGH 7.8

Windows WAN ARP Driver Elevation of Privilege Vulnerability

CVE-2026-40407
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-40406
HIGH 7.5

Windows TCP/IP Information Disclosure Vulnerability

CVE-2026-40405
HIGH 7.5

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40403
CRITICAL 8.8

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2026-40402
CRITICAL 9.3

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-40398
HIGH 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2026-40382
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-40380
HIGH 6.2

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

CVE-2026-40377
HIGH 7.8

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2026-35424
HIGH 7.5

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

CVE-2026-35423
HIGH 5.4

Windows 11 Telnet Client Information Disclosure Vulnerability

CVE-2026-35422
HIGH 6.5

Windows TCP/IP Driver Security Feature Bypass Vulnerability

CVE-2026-35421
CRITICAL 7.8

Windows GDI Remote Code Execution Vulnerability

CVE-2026-35420
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-35419
HIGH 5.5

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2026-35418
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-35415
HIGH 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-34351
HIGH 7.8

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-34350
HIGH 6.5

Windows Storport Miniport Driver Denial of Service Vulnerability

CVE-2026-34347
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability