Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

6,355 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
6,355
Actively exploited
33
Publication window
2009-07-30 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,355 entries Medium Clear all
CVE
CVE-2026-97831
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97829
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97828
MEDIUM 6.5

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97827
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97826
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97824
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97822
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97820
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97819
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97817
MEDIUM 6.5

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97813
MEDIUM 6.5

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-97790
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p…

CVE-2026-96948
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio…

CVE-2026-96944
MEDIUM 5.5

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall…

CVE-2026-96938
MEDIUM 6.7

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96935
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96930
MEDIUM 5.5

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-96927
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96926
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-96925
MEDIUM 5.5

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96921
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo…

CVE-2026-96910
MEDIUM 5.5

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-96865
MEDIUM 5.6

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information …

CVE-2026-96863
MEDIUM 6.8

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96860
MEDIUM 5.5

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96859
MEDIUM 5.5

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-96858
MEDIUM 5.5

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96857
MEDIUM 5.5

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-96855
MEDIUM 5.5

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96854
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local…

CVE-2026-96853
MEDIUM 4.7

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96851
MEDIUM 5.5

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-96850
MEDIUM 5.5

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

CVE-2026-96849
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96848
MEDIUM 5.5

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-96846
MEDIUM 5.5

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-96321
MEDIUM 5.5

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

CVE-2026-96316
MEDIUM 5.5

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96315
MEDIUM 5.5

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

CVE-2026-96314
MEDIUM 5.5

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-96311
MEDIUM 5.5

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-96300
MEDIUM 5.9

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

CVE-2026-96247
MEDIUM 5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96218
MEDIUM 5.5

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

CVE-2026-96183
MEDIUM 5.5

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-95904
MEDIUM 5.5

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-88226
MEDIUM 4.6

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM