Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,726 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,726
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,726 entries Hide N/A Clear all
CVE
CVE-2026-96322
HIGH 7.0

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-96321
MEDIUM 5.5

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

CVE-2026-96320
CRITICAL 9.8

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96319
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96318
HIGH 7.8

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

CVE-2026-96317
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96316
MEDIUM 5.5

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96315
MEDIUM 5.5

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

CVE-2026-96314
MEDIUM 5.5

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-96313
HIGH 7.0

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-96312
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96311
MEDIUM 5.5

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-96310
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96309
HIGH 7.8

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-96308
HIGH 7.8

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96307
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96306
HIGH 7.8

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96305
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96304
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96302
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96301
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96300
MEDIUM 5.9

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

CVE-2026-96254
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96253
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96252
CRITICAL 9.1

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a net…

CVE-2026-96250
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96249
HIGH 7.8

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-96248
HIGH 7.5

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

CVE-2026-96247
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96246
HIGH 7.5

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96245
HIGH 7.5

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96244
HIGH 7.8

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

CVE-2026-96243
HIGH 7.8

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-96223
HIGH 7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-96222
HIGH 7.4

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-96220
HIGH 7.8

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

CVE-2026-96219
CRITICAL 9.8

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-96218
MEDIUM 5.5

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

CVE-2026-96217
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96216
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96215
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi…

CVE-2026-96209
HIGH 7.0

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96186
HIGH 7.8

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-96183
MEDIUM 5.5

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-96118
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96113
CRITICAL 9.8

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96108
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96096
CRITICAL 9.8

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-96071
HIGH 7.5

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-95943
HIGH 7.0

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM