Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-3918
Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2026-3917
Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2026-3915
Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
|
CVE-2026-3914
Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2026-3913
Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2026-26112
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-26109
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-26108
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-26107
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-25180
HIGH · vendor
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-24294
HIGH 7.8
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-24293
HIGH 7.8
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-24289
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-24285
HIGH · vendor
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26132
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-26128
HIGH · vendor
Windows SMB Server Elevation of Privilege Vulnerability |
|
CVE-2026-26111
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-25190
HIGH · vendor
Windows GDI Remote Code Execution Vulnerability |
|
CVE-2026-25189
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-25188
HIGH · vendor
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-25187
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-25186
HIGH · vendor
Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability |
|
CVE-2026-25185
HIGH · vendor
Windows Shell Link Processing Spoofing Vulnerability |
|
CVE-2026-25181
HIGH · vendor
GDI+ Information Disclosure Vulnerability |
|
CVE-2026-25179
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-25178
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-25177
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-25176
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-25175
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-25174
HIGH · vendor
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability |
|
CVE-2026-25173
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-25172
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-25171
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2026-25170
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-25169
HIGH · vendor
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2026-25168
HIGH · vendor
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2026-25167
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2026-25165
HIGH · vendor
Performance Counters for Windows Elevation of Privilege Vulnerability |
|
CVE-2026-24297
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2026-24296
HIGH · vendor
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-24295
HIGH · vendor
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-24292
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2026-24291
HIGH · vendor
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability |
|
CVE-2026-24290
HIGH · vendor
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-24288
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2026-24287
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-24283
HIGH · vendor
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability |
|
CVE-2026-24282
HIGH · vendor
Push message Routing Service Elevation of Privilege Vulnerability |
|
CVE-2026-23674
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2026-23673
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.