Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,052
Actively exploited
374
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries
CVE
CVE-2025-58718
HIGH · vendor

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-58717
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-58716
HIGH · vendor

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58715
HIGH · vendor

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58714
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-55701
HIGH · vendor

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-55700
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-55699
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55696
HIGH · vendor

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

CVE-2025-55695
HIGH · vendor

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2025-55692
HIGH · vendor

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2025-55687
HIGH · vendor

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2025-55685
HIGH · vendor

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55683
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55681
HIGH · vendor

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2025-55680
HIGH · vendor

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-55679
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2025-55678
HIGH · vendor

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-55340
HIGH · vendor

Windows Remote Desktop Protocol Security Feature Bypass

CVE-2025-55339
HIGH · vendor

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

CVE-2025-55338
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55336
HIGH · vendor

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2025-55335
HIGH · vendor

Windows NTFS Elevation of Privilege Vulnerability

CVE-2025-55333
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55332
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55331
HIGH · vendor

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55330
HIGH · vendor

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55328
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-55326
HIGH · vendor

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

CVE-2025-55325
HIGH · vendor

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-53768
HIGH · vendor

Xbox IStorageService Elevation of Privilege Vulnerability

CVE-2025-53150
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-53139
HIGH · vendor

Windows Hello Security Feature Bypass Vulnerability

CVE-2025-50175
HIGH · vendor

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-50152
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-49708
CRITICAL · vendor

Microsoft Graphics Component Elevation of Privilege Vulnerability

CVE-2025-48813
HIGH · vendor

Virtual Secure Mode Spoofing Vulnerability

CVE-2025-48004
HIGH · vendor

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-47827
HIGH · vendor KEV

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

CVE-2025-25004
HIGH · vendor

PowerShell Elevation of Privilege Vulnerability

CVE-2025-24990
HIGH · vendor KEV

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-24052
HIGH · vendor

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-31718
HIGH 7.5

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution pri…

CVE-2025-31717
HIGH 7.5

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privilege…

CVE-2025-43296
MEDIUM 5.5

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.

CVE-2025-47354
HIGH 7.8

Memory corruption while allocating buffers in DSP service.

CVE-2025-47351
HIGH 7.8

Memory corruption while processing user buffers.

CVE-2025-27054
HIGH 7.8

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053
HIGH 7.8

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-39946
CRITICAL 9.8

In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM