Vulnerabilities
Tracked app vulnerabilities
27,631 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,631
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-95933
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95932
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95923
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95922
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95920
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95913
MEDIUM 5.9
Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-95910
MEDIUM 6.7
Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-95909
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95908
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally. |
|
CVE-2026-95906
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95905
MEDIUM 6.8
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-95902
HIGH 7.8
Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95901
CRITICAL 9.8
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95898
HIGH 7.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95895
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95894
HIGH 7.8
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95893
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-95889
MEDIUM 6.6
Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-95888
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95885
HIGH 8.1
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-95884
MEDIUM 5.3
Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network. |
|
CVE-2026-95882
CRITICAL 9.8
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95881
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95879
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95877
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95876
HIGH 7.0
Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95874
HIGH 7.8
Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95872
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95871
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94531
HIGH 7.8
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94529
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94527
HIGH 7.8
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94525
HIGH 7.0
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-94522
HIGH 7.0
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94519
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94517
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-94515
HIGH 7.8
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94514
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-94507
HIGH 7.8
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88247
MEDIUM 5.5
Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88245
HIGH 7.8
Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88243
CRITICAL 9.8
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88242
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88241
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88240
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88239
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88238
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88237
HIGH 7.0
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88236
HIGH 7.5
Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-88235
HIGH 7.8
Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.