Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,673
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,673 entries Windows Clear all
CVE
CVE-2025-58716
HIGH · vendor

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58715
HIGH · vendor

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58714
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-55701
HIGH · vendor

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-55700
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-55699
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55696
HIGH · vendor

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

CVE-2025-55695
HIGH · vendor

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2025-55692
HIGH · vendor

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2025-55687
HIGH · vendor

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2025-55685
HIGH · vendor

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55683
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55681
HIGH · vendor

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2025-55680
HIGH · vendor

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-55679
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55678
HIGH · vendor

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-55340
HIGH · vendor

Windows Remote Desktop Protocol Security Feature Bypass

CVE-2025-55339
HIGH · vendor

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

CVE-2025-55338
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55336
HIGH · vendor

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2025-55335
HIGH · vendor

Windows NTFS Elevation of Privilege Vulnerability

CVE-2025-55333
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55332
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55331
HIGH · vendor

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55330
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55328
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-55326
HIGH · vendor

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

CVE-2025-55325
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-53768
HIGH · vendor

Xbox IStorageService Elevation of Privilege Vulnerability

CVE-2025-53150
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-53139
HIGH · vendor

Windows Hello Security Feature Bypass Vulnerability

CVE-2025-50175
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-50152
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-49708
CRITICAL · vendor

Microsoft Graphics Component Elevation of Privilege Vulnerability

CVE-2025-48813
HIGH · vendor

Virtual Secure Mode Spoofing Vulnerability

CVE-2025-48004
HIGH · vendor

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-47827
HIGH · vendor KEV

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

CVE-2025-25004
HIGH · vendor

PowerShell Elevation of Privilege Vulnerability

CVE-2025-24990
HIGH · vendor KEV

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-24052
HIGH · vendor

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-10892
HIGH 8.8

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

CVE-2025-10891
HIGH 8.8

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

CVE-2025-10890
CRITICAL 9.1

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C…

CVE-2025-10585
CRITICAL 9.8 KEV

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

CVE-2025-10502
HIGH 8.8

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t…

CVE-2025-10501
HIGH 8.8

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

CVE-2025-10500
HIGH 8.8

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

CVE-2025-59216
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el…

CVE-2025-59215
HIGH 7.0

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2025-10537
HIGH 8.8

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruptio…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM