Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,848
Actively exploited
304
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all
CVE
CVE-2026-105006
MEDIUM 6.4

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-105005
HIGH 8.1

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVE-2026-105004
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-105003
HIGH 7.8

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-103578
MEDIUM 6.8

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-103577
HIGH 7.5

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-103576
MEDIUM 6.5

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a …

CVE-2026-103575
HIGH 8.8

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-103569
HIGH 7.5

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

CVE-2026-103568
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to el…

CVE-2026-103567
MEDIUM 5.5

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-103565
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103560
MEDIUM 5.5

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-103558
HIGH 7.5

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-103555
HIGH 7.0

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-103554
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103553
HIGH 7.8

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102227
HIGH 7.8

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-102225
HIGH 8.8

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102221
MEDIUM 4.4

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-102220
HIGH 7.8

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102218
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102217
HIGH 8.8

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

CVE-2026-102216
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-102215
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102214
HIGH 8.8

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-102211
HIGH 7.0

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-102210
CRITICAL 9.8

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102209
HIGH 7.0

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-102208
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-102207
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg…

CVE-2026-102206
MEDIUM 6.8

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-102205
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102203
HIGH 8.8

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-102202
HIGH 7.8

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-102201
HIGH 7.8

Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-102199
MEDIUM 6.5

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

CVE-2026-102198
MEDIUM 5.3

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

CVE-2026-102197
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-102196
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-102195
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-102194
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-102193
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-102192
HIGH 7.5

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-102191
HIGH 7.0

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-102189
HIGH 7.0

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-102188
MEDIUM 6.8

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-102187
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-102186
MEDIUM 4.7

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

CVE-2026-100225
HIGH 7.0

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM