Vulnerabilities
Tracked app vulnerabilities
18,152 CVEs affect a tracked app or OS (all severities, Windows). 302 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,152
- Actively exploited
- 302
- Publication window
- 1997-01-01 → 2026-10-13
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-81401
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81400
MEDIUM 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81399
MEDIUM 5.5
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81398
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81397
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81396
HIGH 7.8
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81395
MEDIUM 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81394
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
|
CVE-2026-81393
MEDIUM 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81392
MEDIUM 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81391
MEDIUM 5.5
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81390
MEDIUM 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81389
HIGH 7.0
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81388
HIGH 7.8
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81387
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
|
CVE-2026-81386
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81355
HIGH 7.5
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
|
CVE-2026-81354
HIGH 8.2
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80096
HIGH 8.8
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-80093
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80090
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-80085
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80083
HIGH 8.8
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-80080
HIGH 8.8
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80079
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-80075
HIGH 7.8
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80073
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78525
HIGH 8.8
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78523
MEDIUM 5.9
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-78522
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78521
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78520
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78519
HIGH 8.8
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78518
HIGH 8.8
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78517
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78516
MEDIUM 4.3
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
|
CVE-2026-78514
HIGH 8.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78513
MEDIUM 5.5
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-78512
HIGH 8.8
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78511
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78509
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78508
MEDIUM 4.6
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-78506
MEDIUM 5.5
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-78504
HIGH 8.8
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78503
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78502
MEDIUM 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78464
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78457
HIGH 7.0
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78455
MEDIUM 4.3
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-78454
MEDIUM 5.5
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.