Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,214
Actively exploited
296
Publication window
2004-07-27 → 2026-11-11
All CVEs 18,214 CISA KEV 296 Public exploit 406 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,214 entries High Hide N/A Clear all
CVE
CVE-2026-56183
HIGH 7.0
Windows

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-56182
HIGH 7.8
Windows

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-56181
HIGH 8.3
Windows

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-56176
HIGH 7.8
Microsoft Office Office
Windows

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-56175
HIGH 7.8
Windows

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-56173
HIGH 7.0
Windows

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.
CVE-2026-55949
HIGH 7.8
Microsoft Excel Office

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55947
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55141
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55137
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55136
HIGH 7.8
Microsoft Excel Office

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55134
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132
HIGH 7.8
Microsoft Word Office

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55131
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55130
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128
HIGH 7.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55127
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55123
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55122
HIGH 7.1
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55120
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55058
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55055
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55053
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55048
HIGH 7.8
Microsoft Excel Office

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55044
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55043
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55041
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55039
HIGH 7.8
Microsoft Excel Office

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55038
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55037
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55036
HIGH 7.8
Microsoft Excel Office

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55033
HIGH 7.8
Microsoft Word Office

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
HIGH 7.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55031
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55029
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55025
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55024
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54128
HIGH 8.4
Windows

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
CVE-2026-54125
HIGH 7.8
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile…
CVE-2026-54124
HIGH 7.8
Windows

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
CVE-2026-54121
HIGH 8.8
Windows

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-54115
HIGH 7.8
Windows

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.
CVE-2026-50692
HIGH 8.8
Windows

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-50689
HIGH 7.8
Windows

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
CVE-2026-50688
HIGH 7.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50687
HIGH 8.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50686
HIGH 8.1
Windows

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-50685
HIGH 7.5
Windows

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-50683
HIGH 8.0
Windows

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-50682
HIGH 7.1
Windows

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM