Vulnerabilities
Tracked app vulnerabilities
4,418 CVEs affect a tracked app or OS (High, macOS). 74 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 4,418
- Actively exploited
- 74
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-81388
HIGH 7.8
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81386
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-80085
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80080
HIGH 8.8
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78525
HIGH 8.8
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78521
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78519
HIGH 8.8
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78518
HIGH 8.8
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78517
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78514
HIGH 8.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78512
HIGH 8.8
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78511
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78504
HIGH 8.8
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78439
HIGH 8.8
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77901
HIGH 8.8
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73013
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72973
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72972
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69797
HIGH 8.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69767
HIGH 8.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69764
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69759
HIGH 8.8
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69722
HIGH 8.8
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69686
HIGH 8.8
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69678
HIGH 8.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69671
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69629
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69576
HIGH 7.8
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69556
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69499
HIGH 8.8
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-68880
HIGH 8.0
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-85053
HIGH 8.8
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a… |
|
CVE-2026-85051
HIGH 8.8
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
|
CVE-2026-85049
HIGH 8.8
Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. … |
|
CVE-2026-85048
HIGH 8.3
Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary c… |
|
CVE-2026-85046
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
|
CVE-2026-85045
HIGH 7.5
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
|
CVE-2026-84351
HIGH 8.3
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbi… |
|
CVE-2026-84350
HIGH 8.8
Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside th… |
|
CVE-2026-84349
HIGH 8.3
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code … |
|
CVE-2026-84347
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
|
CVE-2026-84335
HIGH 8.3
Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged so… |
|
CVE-2026-84334
HIGH 8.1
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sand… |
|
CVE-2026-84326
HIGH 8.8
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML … |
|
CVE-2026-82072
HIGH 8.8
Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
|
CVE-2026-79292
HIGH 8.3
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execut… |
|
CVE-2026-79286
HIGH 7.4
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outsid… |
|
CVE-2026-79266
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the… |
|
CVE-2026-79263
HIGH 8.1
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network… |
|
CVE-2026-79256
HIGH 8.3
Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.