Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2025-29812
HIGH · vendor

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-29811
HIGH · vendor

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2025-29810
HIGH · vendor

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2025-29809
HIGH · vendor

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2025-29808
HIGH · vendor

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2025-27742
HIGH · vendor

NTFS Information Disclosure Vulnerability

CVE-2025-27741
HIGH · vendor

NTFS Elevation of Privilege Vulnerability

CVE-2025-27740
HIGH · vendor

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVE-2025-27739
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-27738
HIGH · vendor

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVE-2025-27737
HIGH · vendor

Windows Security Zone Mapping Security Feature Bypass Vulnerability

CVE-2025-27736
HIGH · vendor

Windows Power Dependency Coordinator Information Disclosure Vulnerability

CVE-2025-27735
HIGH · vendor

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVE-2025-27733
HIGH · vendor

NTFS Elevation of Privilege Vulnerability

CVE-2025-27732
HIGH · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-27731
HIGH · vendor

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

CVE-2025-27730
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-27729
HIGH · vendor

Windows Shell Remote Code Execution Vulnerability

CVE-2025-27728
HIGH · vendor

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2025-27727
HIGH · vendor

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-27492
HIGH · vendor

Windows Secure Channel Elevation of Privilege Vulnerability

CVE-2025-27490
HIGH · vendor

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-27487
HIGH · vendor

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-27486
HIGH · vendor

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2025-27485
HIGH · vendor

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2025-27484
HIGH · vendor

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-27483
HIGH · vendor

NTFS Elevation of Privilege Vulnerability

CVE-2025-27481
HIGH · vendor

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-27479
HIGH · vendor

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability

CVE-2025-27478
HIGH · vendor

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2025-27477
HIGH · vendor

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-27476
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-27475
HIGH · vendor

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2025-27474
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-27473
HIGH · vendor

HTTP.sys Denial of Service Vulnerability

CVE-2025-27471
HIGH · vendor

Microsoft Streaming Service Denial of Service Vulnerability

CVE-2025-27470
HIGH · vendor

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2025-27469
HIGH · vendor

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-26688
HIGH · vendor

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-26681
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2025-26680
HIGH · vendor

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2025-26679
HIGH · vendor

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

CVE-2025-26678
HIGH · vendor

Windows Defender Application Control Security Feature Bypass Vulnerability

CVE-2025-26676
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-26675
HIGH · vendor

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2025-26674
HIGH · vendor

Windows Media Remote Code Execution Vulnerability

CVE-2025-26673
HIGH · vendor

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-26672
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-26671
HIGH · vendor

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-26669
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM