Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,673
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,673 entries Windows Clear all
CVE
CVE-2025-49709
CRITICAL 9.8

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.

CVE-2025-5959
HIGH 8.8

Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…

CVE-2025-5958
HIGH 8.8

Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…

CVE-2025-2884
MEDIUM 6.6

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with…

CVE-2025-47953
CRITICAL · vendor

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47175
HIGH 7.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-47171
MEDIUM 6.7

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

CVE-2025-47169
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-47168
HIGH 7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-47167
CRITICAL · vendor

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47165
HIGH 7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-47164
CRITICAL · vendor

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47162
CRITICAL · vendor

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47969
HIGH · vendor

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

CVE-2025-47955
HIGH · vendor

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2025-47160
HIGH · vendor

Windows Shortcut Files Security Feature Bypass Vulnerability

CVE-2025-33075
HIGH · vendor

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-33073
HIGH · vendor KEV

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2025-33071
CRITICAL · vendor

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

CVE-2025-33070
CRITICAL · vendor

Windows Netlogon Elevation of Privilege Vulnerability

CVE-2025-33069
HIGH · vendor

Windows App Control for Business Security Feature Bypass Vulnerability

CVE-2025-33068
HIGH · vendor

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2025-33067
HIGH · vendor

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-33066
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-33065
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33064
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-33063
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33062
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33061
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33060
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33059
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33058
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33057
HIGH · vendor

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVE-2025-33056
HIGH · vendor

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVE-2025-33055
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33053
HIGH · vendor KEV

Internet Shortcut Files Remote Code Execution Vulnerability

CVE-2025-33052
HIGH · vendor

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2025-33050
HIGH · vendor

DHCP Server Service Denial of Service Vulnerability

CVE-2025-32725
HIGH · vendor

DHCP Server Service Denial of Service Vulnerability

CVE-2025-32724
HIGH · vendor

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2025-32722
HIGH · vendor

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2025-32721
HIGH · vendor

Windows Recovery Driver Elevation of Privilege Vulnerability

CVE-2025-32720
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-32719
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-32718
HIGH · vendor

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2025-32716
HIGH · vendor

Windows Media Elevation of Privilege Vulnerability

CVE-2025-32715
HIGH · vendor

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2025-32714
HIGH · vendor

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-32713
HIGH · vendor

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-32712
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM