Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,052
Actively exploited
374
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries
CVE
CVE-2025-54112
HIGH · vendor

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-54111
HIGH · vendor

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

CVE-2025-54110
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-54109
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54107
HIGH · vendor

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-54106
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-54104
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54103
HIGH · vendor

Windows Management Service Elevation of Privilege Vulnerability

CVE-2025-54102
HIGH · vendor

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54101
HIGH · vendor

Windows SMB Client Remote Code Execution Vulnerability

CVE-2025-54099
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-54098
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54097
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54096
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54095
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-54094
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54093
HIGH · vendor

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2025-54092
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54091
HIGH · vendor

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53810
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-53808
HIGH · vendor

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-53807
HIGH · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-53806
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53805
HIGH · vendor

HTTP.sys Denial of Service Vulnerability

CVE-2025-53804
HIGH · vendor

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2025-53803
HIGH · vendor

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-53802
HIGH · vendor

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-53801
HIGH · vendor

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-53800
CRITICAL · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-53798
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53797
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-53796
HIGH · vendor

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-49734
HIGH · vendor

PowerShell Direct Elevation of Privilege Vulnerability

CVE-2025-3212
MEDIUM 5.3

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows…

CVE-2025-39682
CRITICAL 9.8 KEV

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …

CVE-2025-48581
HIGH 8.4

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat…

CVE-2025-48560
MEDIUM 5.5

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure w…

CVE-2025-48559
MEDIUM 5.5

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denia…

CVE-2025-48549
HIGH 7.8

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of p…

CVE-2025-48544
HIGH 7.8

In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege wit…

CVE-2025-48541
HIGH 7.8

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to …

CVE-2025-48533
HIGH 7.0

In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local esc…

CVE-2025-48529
MEDIUM 5.5

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local infor…

CVE-2025-32347
HIGH 7.8

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to l…

CVE-2025-32331
HIGH 7.8

In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local es…

CVE-2025-26444
HIGH 7.8

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant applicat…

CVE-2025-26423
MEDIUM 6.2

In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to …

CVE-2025-56139
MEDIUM 5.3

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original …

CVE-2025-9867
MEDIUM 5.4

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTM…

CVE-2025-9866
HIGH 8.8

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HT…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM