Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,726 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,726
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,726 entries Hide N/A Clear all
CVE
CVE-2026-97826
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97824
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97822
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97820
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97819
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97817
MEDIUM 6.5

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97816
CRITICAL 9.8

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-97815
CRITICAL 9.8

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-97814
CRITICAL 9.8

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-97813
MEDIUM 6.5

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-97812
HIGH 7.0

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97811
HIGH 7.8

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810
HIGH 7.0

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97809
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97808
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97805
CRITICAL 9.8

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-97804
HIGH 7.8

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-97800
HIGH 7.8

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

CVE-2026-97799
HIGH 7.8

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97798
HIGH 7.8

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg…

CVE-2026-97794
HIGH 7.8

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97793
HIGH 7.0

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

CVE-2026-97792
HIGH 7.8

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97790
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p…

CVE-2026-97789
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-97788
HIGH 7.5

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-97787
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow…

CVE-2026-96953
HIGH 7.8

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-96952
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-96951
HIGH 8.8 KEV

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu…

CVE-2026-96950
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96949
HIGH 7.0

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96948
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio…

CVE-2026-96947
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96946
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96945
HIGH 7.5

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-96944
MEDIUM 5.5

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall…

CVE-2026-96939
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-96938
MEDIUM 6.7

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96937
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96935
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96934
CRITICAL 9.8

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96933
HIGH 7.8

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96932
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM