Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

25,946 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
25,946
Actively exploited
373
Publication window
1997-01-01 → 2026-09-29
All CVEs 25,946 CISA KEV 373 Public exploit 638 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

25,946 entries
CVE
CVE-2026-81390
MEDIUM 5.5
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81389
HIGH 7.0
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81388
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81387
MEDIUM 5.5
Microsoft Excel Office

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo…
CVE-2026-81386
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81355
HIGH 7.5
Windows

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-81354
HIGH 8.2
Windows

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80097
HIGH 8.6
Microsoft Authenticator

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
CVE-2026-80096
HIGH 8.8
Windows

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80093
HIGH 7.0
Windows

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80090
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80085
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80083
HIGH 8.8
Windows

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-80080
HIGH 8.8
Microsoft Word Office

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80079
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80075
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-80073
MEDIUM 6.5
Microsoft Outlook Office

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78525
HIGH 8.8
Microsoft Word Office

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78523
MEDIUM 5.9
Windows

Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-78522
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78521
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78520
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78519
HIGH 8.8
Microsoft Outlook Office

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78518
HIGH 8.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78517
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78516
MEDIUM 4.3
Windows

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall…
CVE-2026-78514
HIGH 8.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78513
MEDIUM 5.5
Microsoft PowerPoint Office

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78512
HIGH 8.8
Microsoft Word Office

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78509
CRITICAL 9.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78508
MEDIUM 4.6
Windows

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78506
MEDIUM 5.5
Microsoft Word Office

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78504
HIGH 8.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78503
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78464
HIGH 7.0
Windows

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-78457
HIGH 7.0
Windows

Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78455
MEDIUM 4.3
Windows

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78454
MEDIUM 5.5
Windows

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-78453
MEDIUM 6.5
Windows

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
CVE-2026-78452
MEDIUM 4.6
Windows

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78451
MEDIUM 6.8
Windows

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-78450
HIGH 8.1
Windows

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78449
HIGH 8.1
Windows

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78448
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78446
MEDIUM 5.3
Windows

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
CVE-2026-78445
CRITICAL 9.8
Windows

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-78444
HIGH 8.1
Windows

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-77911
MEDIUM 6.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM