Vulnerabilities
Tracked app vulnerabilities
27,631 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,631
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-95962
HIGH · vendor
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability |
|
CVE-2026-95956
HIGH · vendor
Windows eSCL Scanner Remote Code Execution Vulnerability |
|
CVE-2026-95896
HIGH · vendor
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-95891
HIGH · vendor
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-88249
HIGH · vendor
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-88244
HIGH · vendor
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-88229
HIGH · vendor
Windows Media Player Remote Code Execution Vulnerability |
|
CVE-2026-88222
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-88216
HIGH · vendor
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-88212
HIGH · vendor
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-85839
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-85838
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-81384
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2026-72998
HIGH · vendor
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-69565
HIGH · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-69327
HIGH · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-125136
CRITICAL · vendor
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability |
|
CVE-2026-125134
CRITICAL · vendor
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
|
CVE-2026-124225
HIGH · vendor
Windows PowerShell Remote Code Execution Vulnerability |
|
CVE-2026-122475
HIGH · vendor
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-122176
HIGH · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-122171
HIGH · vendor
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-122163
HIGH · vendor
Windows Image Acquisition Remote Code Execution Vulnerability |
|
CVE-2026-119992
HIGH · vendor
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-119988
HIGH · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-119987
HIGH · vendor
Microsoft Windows App Store Elevation of Privilege Vulnerability |
|
CVE-2026-119974
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119972
HIGH · vendor
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2026-119971
HIGH · vendor
Windows DNS Server Information Disclosure Vulnerability |
|
CVE-2026-119970
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-119969
CRITICAL · vendor
Graphic Fonts Remote Code Execution Vulnerability |
|
CVE-2026-119967
CRITICAL · vendor
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-119966
CRITICAL · vendor
Windows Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119965
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119964
CRITICAL · vendor
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119963
CRITICAL · vendor
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119962
CRITICAL · vendor
Windows CredSSP Remote Code Execution Vulnerability |
|
CVE-2026-119961
CRITICAL · vendor
Windows Internet Information Services Remote Code Execution Vulnerability |
|
CVE-2026-119960
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119959
HIGH · vendor
Windows Hyper-V Spoofing Vulnerability |
|
CVE-2026-119957
CRITICAL · vendor
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-119955
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-119954
HIGH · vendor
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-119953
HIGH · vendor
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-119952
CRITICAL · vendor
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2026-119951
CRITICAL · vendor
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-119950
HIGH · vendor
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119948
HIGH · vendor
Windows Active Directory Remote Code Execution Vulnerability |
|
CVE-2026-119947
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119946
HIGH · vendor
HTTP.sys Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.