Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

29,072 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
29,072
Actively exploited
374
Publication window
1997-01-01 → 2026-11-03

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,072 entries
CVE
CVE-2026-96244
HIGH 7.8

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

CVE-2026-96243
HIGH 7.8

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-96223
HIGH 7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-96222
HIGH 7.4

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-96220
HIGH 7.8

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

CVE-2026-96219
CRITICAL 9.8

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-96218
MEDIUM 5.5

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

CVE-2026-96217
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96216
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96215
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi…

CVE-2026-96209
HIGH 7.0

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96186
HIGH 7.8

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-96183
MEDIUM 5.5

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-96118
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96113
CRITICAL 9.8

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96108
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96096
CRITICAL 9.8

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-96071
HIGH 7.5

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-95943
HIGH 7.0

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-95904
MEDIUM 5.5

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-88226
MEDIUM 4.6

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-88219
HIGH 8.8

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-88194
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88193
HIGH 7.8

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-88191
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-88189
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88188
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88182
HIGH 7.8

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88181
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88180
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88179
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88177
HIGH 7.8

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88174
HIGH 8.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e…

CVE-2026-88173
HIGH 8.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88171
HIGH 8.1

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88168
HIGH 7.8

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88165
HIGH 8.8

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-88162
MEDIUM 5.5

Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVE-2026-88161
HIGH 7.0

Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2026-88160
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker…

CVE-2026-88159
HIGH 8.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88158
MEDIUM 5.5

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

CVE-2026-88157
HIGH 8.8

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-88152
HIGH 7.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88149
HIGH 7.0

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88147
HIGH 7.8

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

CVE-2026-88146
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an…

CVE-2026-88143
MEDIUM 6.7

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88142
HIGH 8.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88141
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM