Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,479 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,479
Actively exploited
246
Publication window
2004-07-27 → 2026-11-10

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,479 entries High Windows Clear all
CVE
CVE-2026-96302
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96301
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96254
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96253
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96250
HIGH 7.0

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96249
HIGH 7.8

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-96248
HIGH 7.5

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

CVE-2026-96246
HIGH 7.5

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96245
HIGH 7.5

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96244
HIGH 7.8

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

CVE-2026-96243
HIGH 7.8

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-96223
HIGH 7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-96222
HIGH 7.4

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-96220
HIGH 7.8

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

CVE-2026-96217
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96216
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96215
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi…

CVE-2026-96209
HIGH 7.0

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96186
HIGH 7.8

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-96118
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96108
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96071
HIGH 7.5

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-95943
HIGH 7.0

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-88219
HIGH 8.8

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-88194
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88193
HIGH 7.8

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-88191
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-88189
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88188
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88182
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88181
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88180
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88179
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88177
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88174
HIGH 8.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e…

CVE-2026-88173
HIGH 8.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88171
HIGH 8.1

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88168
HIGH 7.8

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88165
HIGH 8.8

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-88161
HIGH 7.0

Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2026-88160
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker…

CVE-2026-88159
HIGH 8.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88157
HIGH 8.8

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-88152
HIGH 7.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88149
HIGH 7.0

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88147
HIGH 7.8

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

CVE-2026-88146
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an…

CVE-2026-88142
HIGH 8.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88141
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88139
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM