Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2025-48823
HIGH · vendor

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2025-48822
CRITICAL · vendor

Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

CVE-2025-48821
HIGH · vendor

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-48820
HIGH · vendor

Windows AppX Deployment Service Elevation of Privilege Vulnerability

CVE-2025-48819
HIGH · vendor

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-48818
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48817
HIGH · vendor

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-48816
HIGH · vendor

HID Class Driver Elevation of Privilege Vulnerability

CVE-2025-48815
HIGH · vendor

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-48814
HIGH · vendor

Remote Desktop Licensing Service Security Feature Bypass Vulnerability

CVE-2025-48811
HIGH · vendor

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2025-48810
HIGH · vendor

Windows Secure Kernel Mode Information Disclosure Vulnerability

CVE-2025-48809
HIGH · vendor

Windows Secure Kernel Mode Information Disclosure Vulnerability

CVE-2025-48808
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-48806
HIGH · vendor

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

CVE-2025-48805
HIGH · vendor

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

CVE-2025-48804
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48803
HIGH · vendor

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

CVE-2025-48802
HIGH · vendor

Windows SMB Server Spoofing Vulnerability

CVE-2025-48800
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48799
HIGH · vendor

Windows Update Service Elevation of Privilege Vulnerability

CVE-2025-48003
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48002
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2025-48001
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48000
HIGH · vendor

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-47999
HIGH · vendor

Windows Hyper-V Denial of Service Vulnerability

CVE-2025-47998
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-47996
HIGH · vendor

Windows MBT Transport Driver Elevation of Privilege Vulnerability

CVE-2025-47993
HIGH · vendor

Microsoft PC Manager Elevation of Privilege Vulnerability

CVE-2025-47991
HIGH · vendor

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2025-47987
HIGH · vendor

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

CVE-2025-47986
HIGH · vendor

Universal Print Management Service Elevation of Privilege Vulnerability

CVE-2025-47985
HIGH · vendor

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2025-47984
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2025-47982
HIGH · vendor

Windows Storage VSP Driver Elevation of Privilege Vulnerability

CVE-2025-47981
CRITICAL · vendor

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2025-47980
CRITICAL · vendor

Windows Imaging Component Information Disclosure Vulnerability

CVE-2025-47978
HIGH · vendor

Windows Kerberos Denial of Service Vulnerability

CVE-2025-47976
HIGH · vendor

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-47975
HIGH · vendor

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-47973
HIGH · vendor

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-47972
HIGH · vendor

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2025-47971
HIGH · vendor

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-47159
HIGH · vendor

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

CVE-2025-33054
HIGH · vendor

Remote Desktop Spoofing Vulnerability

CVE-2025-26636
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-6554
HIGH 8.1 KEV

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secur…

CVE-2025-32462
LOW 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on …

CVE-2025-6557
MEDIUM 5.4

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specifi…

CVE-2025-6556
MEDIUM 5.4

Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTM…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM