Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,848
Actively exploited
304
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all
CVE
CVE-2026-83855
HIGH 7.5

Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

CVE-2026-83854
MEDIUM 5.5

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-83853
HIGH 7.0

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83852
HIGH 7.0

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83851
HIGH 8.8

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83850
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83849
MEDIUM 5.5

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

CVE-2026-83848
HIGH 7.8

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83847
HIGH 7.8

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-83846
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-83845
HIGH 8.4

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-83843
HIGH 7.5

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-83842
HIGH 7.0

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83841
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg…

CVE-2026-83840
HIGH 7.8

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83839
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-83838
HIGH 8.0

Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-83837
HIGH 7.8

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83836
HIGH 7.8

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

CVE-2026-83835
MEDIUM 5.5

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-83834
HIGH 7.0

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83833
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83832
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-83830
HIGH 7.8

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83829
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83828
HIGH 7.8

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-83827
HIGH 7.0

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83826
HIGH 7.8

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83798
MEDIUM 5.5

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

CVE-2026-83797
HIGH 8.8

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83796
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83795
HIGH 7.5

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-83794
MEDIUM 5.5

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

CVE-2026-83793
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local…

CVE-2026-83792
HIGH 7.8

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83791
HIGH 7.8

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

CVE-2026-83790
HIGH 7.0

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83789
HIGH 8.8

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83788
MEDIUM 4.6

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-83787
MEDIUM 5.5

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-83786
MEDIUM 4.7

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83785
HIGH 7.0

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83784
HIGH 8.8

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-83783
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-83782
CRITICAL 9.8

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-83781
HIGH 7.8

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83780
CRITICAL 9.8

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83779
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83778
HIGH 8.8

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

CVE-2026-83777
HIGH 8.8

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM