Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,557 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,557
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,557 entries High Windows Clear all
CVE
CVE-2026-83859
HIGH 7.8

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83857
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83856
HIGH 7.5

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-83855
HIGH 7.5

Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

CVE-2026-83853
HIGH 7.0

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83852
HIGH 7.0

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83851
HIGH 8.8

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83850
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83848
HIGH 7.8

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83847
HIGH 7.8

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-83846
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-83845
HIGH 8.4

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-83843
HIGH 7.5

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-83842
HIGH 7.0

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83841
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg…

CVE-2026-83840
HIGH 7.8

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83839
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-83838
HIGH 8.0

Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-83837
HIGH 7.8

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83836
HIGH 7.8

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

CVE-2026-83834
HIGH 7.0

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83833
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83832
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-83830
HIGH 7.8

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83829
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83828
HIGH 7.8

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-83827
HIGH 7.0

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83826
HIGH 7.8

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83797
HIGH 8.8

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83796
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83795
HIGH 7.5

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-83793
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local…

CVE-2026-83792
HIGH 7.8

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83791
HIGH 7.8

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

CVE-2026-83790
HIGH 7.0

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83789
HIGH 8.8

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83785
HIGH 7.0

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83784
HIGH 8.8

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-83783
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-83781
HIGH 7.8

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83779
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83778
HIGH 8.8

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

CVE-2026-83777
HIGH 8.8

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83775
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-83771
HIGH 8.8

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83769
HIGH 7.8

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-83768
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83767
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83763
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

CVE-2026-83762
HIGH 7.8

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM