Vulnerabilities
Tracked app vulnerabilities
28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,604
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-55124
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-55123
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55122
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-55120
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55058
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55055
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55054
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-55053
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55050
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-55048
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55046
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-55044
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55043
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55041
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55039
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55038
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55037
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55036
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55033
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55032
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55031
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55029
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55025
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55024
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54128
HIGH 8.4
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54126
MEDIUM 6.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-54125
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-54124
HIGH 7.8
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54121
HIGH 8.8
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-54115
HIGH 7.8
Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50692
HIGH 8.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50690
MEDIUM 5.5
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
|
CVE-2026-50689
HIGH 7.8
Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50688
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50687
HIGH 8.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50686
HIGH 8.1
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50685
HIGH 7.5
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-50684
MEDIUM 4.8
Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attac… |
|
CVE-2026-50683
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-50682
HIGH 7.1
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. |
|
CVE-2026-50681
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-50680
HIGH 8.2
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50679
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50677
HIGH 7.8
Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50676
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
|
CVE-2026-50674
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50673
HIGH 7.8
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50672
HIGH 7.0
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50670
HIGH 8.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50669
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.