Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,673
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,673 entries Windows Clear all
CVE
CVE-2025-8880
HIGH 8.8

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec…

CVE-2025-8879
HIGH 8.8

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of g…

CVE-2025-53766
CRITICAL · vendor

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2025-53761
HIGH 7.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-53741
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53739
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53738
HIGH 7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-53737
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53736
MEDIUM 6.8

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2025-53735
HIGH 7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53733
HIGH 8.4

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-55231
HIGH · vendor

Windows Storage-based Management Service Remote Code Execution Vulnerability

CVE-2025-55230
HIGH · vendor

Windows MBT Transport Driver Elevation of Privilege Vulnerability

CVE-2025-55229
HIGH · vendor

Windows Certificate Spoofing Vulnerability

CVE-2025-53789
HIGH · vendor

Windows StateRepository API Server file Elevation of Privilege Vulnerability

CVE-2025-53779
MEDIUM · vendor

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2025-53778
CRITICAL · vendor

Windows NTLM Elevation of Privilege Vulnerability

CVE-2025-53726
HIGH · vendor

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53725
HIGH · vendor

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53724
HIGH · vendor

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53723
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53722
HIGH · vendor

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2025-53721
HIGH · vendor

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-53720
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-53719
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53718
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53716
HIGH · vendor

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2025-53156
HIGH · vendor

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2025-53155
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53154
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53153
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53152
HIGH · vendor

Desktop Windows Manager Remote Code Execution Vulnerability

CVE-2025-53151
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-53149
HIGH · vendor

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-53148
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53147
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53145
HIGH · vendor

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53144
HIGH · vendor

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53143
HIGH · vendor

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53142
HIGH · vendor

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-53141
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53140
HIGH · vendor

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

CVE-2025-53138
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53137
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53136
HIGH · vendor

NT OS Kernel Information Disclosure Vulnerability

CVE-2025-53135
HIGH · vendor

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-53134
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53133
HIGH · vendor

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-53132
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2025-53131
HIGH · vendor

Windows Media Remote Code Execution Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM