Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

29,072 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
29,072
Actively exploited
374
Publication window
1997-01-01 → 2026-11-03

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,072 entries
CVE
CVE-2026-88141
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88140
MEDIUM 5.5

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-88139
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88137
MEDIUM 6.5

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

CVE-2026-88136
HIGH 8.8

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

CVE-2026-88135
HIGH 7.8

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88134
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88133
HIGH 7.8

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88130
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88129
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88128
HIGH 7.8

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88127
HIGH 7.0

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88126
HIGH 7.8

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88125
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88124
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88123
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88122
MEDIUM 6.5

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88121
HIGH 8.0

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88120
HIGH 8.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88119
HIGH 8.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88118
HIGH 7.8

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88117
HIGH 8.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88116
HIGH 8.8

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88115
HIGH 8.8

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88114
HIGH 8.8

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88113
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88112
HIGH 8.8

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88110
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88107
HIGH 7.0

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88106
HIGH 7.0

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88105
HIGH 7.8

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88103
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88102
CRITICAL 9.8

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-88101
HIGH 7.8

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88100
HIGH 7.8

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88099
MEDIUM 5.9

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-88098
HIGH 7.0

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-88096
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate pri…

CVE-2026-88093
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88091
HIGH 7.8

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080
HIGH 7.8

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88079
HIGH 7.0

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-88076
HIGH 7.0

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88074
HIGH 7.8

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-88073
HIGH 8.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88072
HIGH 7.8

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88071
HIGH 7.8

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88070
HIGH 7.8

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87716
HIGH 7.5

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

CVE-2026-87715
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM