Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,848
Actively exploited
304
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all
CVE
CVE-2026-97841
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97840
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97839
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97838
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97837
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97836
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97835
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97834
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97833
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97832
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97831
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97830
HIGH 7.5

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

CVE-2026-97829
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97828
MEDIUM 6.5

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97827
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97826
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97824
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97822
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97820
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97819
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97817
MEDIUM 6.5

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97816
CRITICAL 9.8

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-97815
CRITICAL 9.8

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-97814
CRITICAL 9.8

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-97813
MEDIUM 6.5

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-97812
HIGH 7.0

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97811
HIGH 7.8

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810
HIGH 7.0

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97809
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97808
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97805
CRITICAL 9.8

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-97804
HIGH 7.8

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-97800
HIGH 7.8

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

CVE-2026-97799
HIGH 7.8

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97798
HIGH 7.8

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg…

CVE-2026-97794
HIGH 7.8

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97793
HIGH 7.0

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

CVE-2026-97792
HIGH 7.8

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97790
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p…

CVE-2026-97789
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-97788
HIGH 7.5

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-97787
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow…

CVE-2026-96953
HIGH 7.8

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-96952
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM