Vulnerabilities
Tracked app vulnerabilities
18,157 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,157
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-108425
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-108424
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2026-108423
HIGH · vendor
Windows WinHTTP Information Disclosure Vulnerability |
|
CVE-2026-108421
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-108419
HIGH · vendor
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108418
HIGH · vendor
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108417
HIGH · vendor
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108416
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-108415
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-108414
HIGH · vendor
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-108413
HIGH · vendor
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-108412
HIGH · vendor
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2026-108411
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2026-108410
HIGH · vendor
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-108409
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-108408
HIGH · vendor
Windows Telephony Service Information Disclosure Vulnerability |
|
CVE-2026-108407
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2026-108406
HIGH · vendor
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-108405
HIGH · vendor
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2026-108404
HIGH · vendor
Windows CD-ROM Driver Remote Code Execution Vulnerability |
|
CVE-2026-108403
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-108402
HIGH · vendor
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
|
CVE-2026-108401
HIGH · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-105590
HIGH · vendor
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2026-105589
HIGH · vendor
Windows Wireless Networking Elevation of Privilege Vulnerability |
|
CVE-2026-105588
HIGH · vendor
Windows DHCP Server Elevation of Privilege Vulnerability |
|
CVE-2026-105587
HIGH · vendor
Windows OLE DB Elevation of Privilege Vulnerability |
|
CVE-2026-105586
HIGH · vendor
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2026-105584
HIGH · vendor
Windows Inventory Backup Information Disclosure Vulnerability |
|
CVE-2026-105583
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105582
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105581
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-105580
HIGH · vendor
Windows Management Instrumentation Remote Code Execution Vulnerability |
|
CVE-2026-105579
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-105578
HIGH · vendor
Microsoft JScript Remote Code Execution Vulnerability |
|
CVE-2026-105575
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105574
HIGH · vendor
Windows MIDI Service Module Elevation of Privileges Vulnerability |
|
CVE-2026-105569
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-105568
HIGH · vendor
Windows Active Directory Domain Services Denial of Service Vulnerability |
|
CVE-2026-105567
HIGH · vendor
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-105566
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105565
HIGH · vendor
Windows MIDI Service Module Elevation of Privileges Vulnerability |
|
CVE-2026-105562
HIGH · vendor
Windows Container Manager Service Information Disclosure Vulnerability |
|
CVE-2026-105561
HIGH · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2026-105560
HIGH · vendor
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-105559
HIGH · vendor
Windows Active Directory Denial of Service Vulnerability |
|
CVE-2026-105558
HIGH · vendor
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-105557
HIGH · vendor
Windows DHCP Server Information Disclosure Vulnerability |
|
CVE-2026-105554
HIGH · vendor
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
|
CVE-2026-105553
HIGH · vendor
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.