Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,848
Actively exploited
304
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all
CVE
CVE-2026-83716
HIGH 8.8

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83715
HIGH 7.1

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVE-2026-83714
MEDIUM 5.5

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83713
MEDIUM 5.5

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-83712
HIGH 7.8

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83710
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83709
HIGH 7.8

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

CVE-2026-83708
HIGH 7.0

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83707
HIGH 7.0

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

CVE-2026-83706
MEDIUM 6.7

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83705
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83704
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-83703
MEDIUM 6.5

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-83702
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83701
HIGH 7.0

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83700
HIGH 7.8

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83699
HIGH 7.8

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83698
HIGH 7.8

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83697
MEDIUM 4.7

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-83696
HIGH 7.0

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83695
MEDIUM 5.5

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-83694
HIGH 7.0

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83693
CRITICAL 9.8

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83692
HIGH 7.8

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83691
HIGH 7.8

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83690
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83689
HIGH 7.0

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83688
HIGH 8.8

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-83687
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-83686
MEDIUM 5.5

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-83685
MEDIUM 6.5

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

CVE-2026-83683
MEDIUM 6.5

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

CVE-2026-83682
HIGH 7.0

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83680
HIGH 7.0

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83679
HIGH 7.8

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83678
HIGH 7.8

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83677
HIGH 7.5

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

CVE-2026-83676
HIGH 7.0

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83675
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83674
HIGH 8.1

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83672
MEDIUM 4.7

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-83671
MEDIUM 6.5

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-83670
HIGH 7.5

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

CVE-2026-83669
HIGH 7.8

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83668
MEDIUM 5.5

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

CVE-2026-83667
MEDIUM 6.5

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83666
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authoriz…

CVE-2026-83665
HIGH 7.5

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83664
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose informati…

CVE-2026-83659
HIGH 7.8

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM