Vulnerabilities
Tracked app vulnerabilities
18,166 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,166
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-95942
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95938
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95935
HIGH 7.8
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95934
HIGH 7.8
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95933
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95932
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95923
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95922
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95920
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95909
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95906
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95902
HIGH 7.8
Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95898
HIGH 7.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95895
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95894
HIGH 7.8
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95888
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95885
HIGH 8.1
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-95881
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95879
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95877
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95876
HIGH 7.0
Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95874
HIGH 7.8
Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95872
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95871
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94531
HIGH 7.8
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94529
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94527
HIGH 7.8
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94525
HIGH 7.0
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-94522
HIGH 7.0
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94519
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94515
HIGH 7.8
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94514
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-94507
HIGH 7.8
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88245
HIGH 7.8
Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88242
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88241
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88239
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88238
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88237
HIGH 7.0
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88236
HIGH 7.5
Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-88235
HIGH 7.8
Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88233
HIGH 7.8
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88232
HIGH 7.8
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88230
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88228
HIGH 7.0
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88227
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88224
HIGH 7.0
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88221
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88213
HIGH 7.8
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85942
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.