Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,726 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,726
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,726 entries Hide N/A Clear all
CVE
CVE-2026-96931
HIGH 7.8

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96930
MEDIUM 5.5

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-96929
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96928
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96927
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96926
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-96925
MEDIUM 5.5

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96924
CRITICAL 9.8

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

CVE-2026-96923
HIGH 7.0

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96921
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo…

CVE-2026-96920
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96919
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96918
HIGH 7.8

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96917
HIGH 8.8

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96916
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96915
HIGH 7.8

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96914
HIGH 8.8

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-96913
HIGH 8.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96912
HIGH 7.8

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96911
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-96910
MEDIUM 5.5

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-96909
CRITICAL 9.8

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

CVE-2026-96868
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96867
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96866
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96865
MEDIUM 5.6

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information …

CVE-2026-96864
CRITICAL 9.8

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-96863
MEDIUM 6.8

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96862
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96861
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96860
MEDIUM 5.5

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96859
MEDIUM 5.5

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-96858
MEDIUM 5.5

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96857
MEDIUM 5.5

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-96856
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96855
MEDIUM 5.5

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96854
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local…

CVE-2026-96853
MEDIUM 4.7

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96852
HIGH 7.0

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96851
MEDIUM 5.5

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-96850
MEDIUM 5.5

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

CVE-2026-96849
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96848
MEDIUM 5.5

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96847
HIGH 7.8

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96846
MEDIUM 5.5

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-96844
HIGH 8.0

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-96843
HIGH 7.8

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96325
HIGH 7.5

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-96324
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96323
HIGH 7.0

Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM