Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,557 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,557
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,557 entries High Windows Clear all
CVE
CVE-2026-69984
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69977
HIGH 7.0

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-69976
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69970
HIGH 7.0

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69966
HIGH 7.8

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
HIGH 7.0

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69963
HIGH 7.8

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69959
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69957
HIGH 7.8

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69953
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69952
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69950
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69949
HIGH 7.8

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69945
HIGH 8.8

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-69942
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69935
HIGH 7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69934
HIGH 7.8

Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69931
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile…

CVE-2026-69926
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69923
HIGH 7.8

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.

CVE-2026-69918
HIGH 8.8

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-69916
HIGH 7.8

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69915
HIGH 7.0

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69913
HIGH 8.1

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-69909
HIGH 7.8

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-69898
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69884
HIGH 7.8

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-69882
HIGH 7.8

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69880
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69867
HIGH 7.8

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

CVE-2026-69856
HIGH 7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69850
HIGH 7.8

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-69840
HIGH 7.0

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-69830
HIGH 8.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute c…

CVE-2026-69802
HIGH 8.1

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

CVE-2026-69798
HIGH 7.8

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69795
HIGH 7.0

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

CVE-2026-69789
HIGH 7.5

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-69783
HIGH 7.8

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69766
HIGH 7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69765
HIGH 8.8

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69763
HIGH 7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69743
HIGH 7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69736
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elev…

CVE-2026-69733
HIGH 7.8

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69718
HIGH 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges local…

CVE-2026-69673
HIGH 7.8

Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69650
HIGH 7.8

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

CVE-2026-69633
HIGH 7.8

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69596
HIGH 7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM