Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,765 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,765
Actively exploited
304
Publication window
2004-07-27 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,765 entries Windows Hide N/A Clear all
CVE
CVE-2026-96035
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96031
HIGH 7.8

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96029
HIGH 7.8

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96028
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96027
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96026
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96023
HIGH 7.8

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

CVE-2026-96022
MEDIUM 5.6

Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

CVE-2026-96019
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-96018
MEDIUM 6.5

Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.

CVE-2026-96017
MEDIUM 4.9

Use after free in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-96016
HIGH 7.8

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96010
HIGH 8.8

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

CVE-2026-96008
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96007
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-96005
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96004
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96001
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l…

CVE-2026-95999
HIGH 7.8

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95998
MEDIUM 4.4

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.

CVE-2026-95997
HIGH 7.8

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95996
HIGH 8.8

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-95991
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95989
HIGH 7.0

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95988
HIGH 7.8

Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95987
HIGH 7.0

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95983
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95979
HIGH 7.0

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-95977
MEDIUM 5.5

Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.

CVE-2026-95976
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker …

CVE-2026-95974
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95973
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95971
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95968
HIGH 7.0

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-95966
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95965
HIGH 7.8

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95963
HIGH 7.8

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-95961
HIGH 7.0

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95960
HIGH 8.8

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges lo…

CVE-2026-95953
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95951
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-95950
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95948
HIGH 7.8

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95947
HIGH 7.8

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

CVE-2026-95946
MEDIUM 5.5

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-95944
MEDIUM 5.5

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.

CVE-2026-95942
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95938
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95935
HIGH 7.8

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95934
HIGH 7.8

Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM