Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,479 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,479
Actively exploited
246
Publication window
2004-07-27 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,479 entries High Windows Clear all
CVE
CVE-2026-96951
HIGH 8.8 KEV

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu…

CVE-2026-96950
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96949
HIGH 7.0

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96947
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96946
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96945
HIGH 7.5

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-96939
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-96937
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96933
HIGH 7.8

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96932
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e…

CVE-2026-96931
HIGH 7.8

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96929
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96928
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96923
HIGH 7.0

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96920
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96919
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96918
HIGH 7.8

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96917
HIGH 8.8

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96916
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96915
HIGH 7.8

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96914
HIGH 8.8

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-96913
HIGH 8.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96912
HIGH 7.8

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96911
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-96868
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96867
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96866
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96862
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96861
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96856
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96852
HIGH 7.0

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96847
HIGH 7.8

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96844
HIGH 8.0

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-96843
HIGH 7.8

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96325
HIGH 7.5

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-96324
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96323
HIGH 7.0

Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-96322
HIGH 7.0

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-96319
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96318
HIGH 7.8

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

CVE-2026-96317
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96313
HIGH 7.0

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-96312
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96310
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96309
HIGH 7.8

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-96308
HIGH 7.8

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96307
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96306
HIGH 7.8

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96305
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96304
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM