Vulnerabilities
Tracked app vulnerabilities
18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,848
- Actively exploited
- 304
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-97841
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97840
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97839
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97838
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97837
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97836
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97835
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97834
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97833
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97832
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97831
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97830
HIGH 7.5
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-97829
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97828
MEDIUM 6.5
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97827
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97826
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97825
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97824
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97823
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97822
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97821
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97820
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97819
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97817
MEDIUM 6.5
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97816
CRITICAL 9.8
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97815
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97814
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97813
MEDIUM 6.5
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97812
HIGH 7.0
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97811
HIGH 7.8
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97810
HIGH 7.0
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97809
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97808
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97807
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97806
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97805
CRITICAL 9.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97804
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97803
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97800
HIGH 7.8
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97799
HIGH 7.8
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97798
HIGH 7.8
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg… |
|
CVE-2026-97794
HIGH 7.8
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97793
HIGH 7.0
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97792
HIGH 7.8
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97790
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p… |
|
CVE-2026-97789
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97788
HIGH 7.5
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-97787
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow… |
|
CVE-2026-96953
HIGH 7.8
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-96952
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.