Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,166 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,166
Actively exploited
296
Publication window
2004-07-27 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,166 entries High Clear all
CVE
CVE-2026-96056
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96055
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96053
HIGH 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg…

CVE-2026-96052
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96051
HIGH 7.0

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96047
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96046
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96043
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96042
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96038
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96037
HIGH 7.8

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96036
HIGH 7.8

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96035
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96031
HIGH 7.8

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96029
HIGH 7.8

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96028
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96027
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96026
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96023
HIGH 7.8

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

CVE-2026-96019
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-96016
HIGH 7.8

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96010
HIGH 8.8

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

CVE-2026-96008
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96007
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-96005
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96004
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-95999
HIGH 7.8

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95997
HIGH 7.8

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95996
HIGH 8.8

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-95991
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95989
HIGH 7.0

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95988
HIGH 7.8

Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95987
HIGH 7.0

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95983
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95979
HIGH 7.0

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-95976
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker …

CVE-2026-95974
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95973
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95971
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95968
HIGH 7.0

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-95966
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95965
HIGH 7.8

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95963
HIGH 7.8

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-95961
HIGH 7.0

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95960
HIGH 8.8

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges lo…

CVE-2026-95953
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95951
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-95950
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95948
HIGH 7.8

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95947
HIGH 7.8

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM