Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,848
Actively exploited
304
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all
CVE
CVE-2026-70096
CRITICAL 9.8

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70095
HIGH 7.5

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093
HIGH 7.8

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092
HIGH 7.8

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70090
MEDIUM 5.5

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

CVE-2026-70089
HIGH 8.8

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70087
MEDIUM 5.5

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70086
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70085
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70084
MEDIUM 5.5

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-70083
MEDIUM 5.5

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70082
HIGH 7.5

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70079
HIGH 7.5

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70077
MEDIUM 4.7

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70076
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70075
MEDIUM 4.4

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security fea…

CVE-2026-70074
MEDIUM 5.5

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-70072
MEDIUM 6.5

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70071
MEDIUM 5.5

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70069
HIGH 8.8

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-70068
HIGH 8.8

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70067
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70066
HIGH 7.0

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70064
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70063
MEDIUM 4.7

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70062
HIGH 8.1

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060
HIGH 7.8

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70059
HIGH 7.8

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70058
HIGH 7.5

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70057
MEDIUM 5.5

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVE-2026-70056
HIGH 7.0

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70055
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose informat…

CVE-2026-70054
HIGH 7.8

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-70052
HIGH 7.8

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

CVE-2026-70051
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-70048
HIGH 7.8

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70045
HIGH 7.0

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-70044
MEDIUM 5.5

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

CVE-2026-70041
MEDIUM 5.5

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-70038
HIGH 8.1

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70033
HIGH 7.5

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

CVE-2026-70031
HIGH 7.5

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-70027
HIGH 7.8

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-70026
HIGH 7.0

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025
MEDIUM 5.3

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70024
CRITICAL 9.8

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70023
HIGH 7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021
HIGH 7.0

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70017
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-70015
HIGH 7.8

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM