Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,854 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,854
Actively exploited
374
Publication window
1997-01-01 → 2026-11-01

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,854 entries
CVE
CVE-2026-69996
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69995
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69994
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69992
HIGH 7.5

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69991
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69988
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69987
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69986
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69985
HIGH 8.8

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69984
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69982
MEDIUM 5.9

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69979
MEDIUM 5.5

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-69978
MEDIUM 5.6

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69977
HIGH 7.0

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-69976
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69974
MEDIUM 4.7

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-69973
MEDIUM 6.5

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over …

CVE-2026-69971
MEDIUM 5.5

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-69970
HIGH 7.0

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69969
MEDIUM 4.7

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69968
MEDIUM 6.5

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69967
MEDIUM 5.5

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69966
HIGH 7.8

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
HIGH 7.0

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69963
HIGH 7.8

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69959
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69958
MEDIUM 6.8

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69957
HIGH 7.8

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69955
MEDIUM 6.5

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69954
MEDIUM 5.5

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69953
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69952
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69950
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69949
HIGH 7.8

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69947
MEDIUM 6.8

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69945
HIGH 8.8

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-69942
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69940
MEDIUM 6.5

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69935
HIGH 7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69934
HIGH 7.8

Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69931
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile…

CVE-2026-69926
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69923
HIGH 7.8

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.

CVE-2026-69919
MEDIUM 5.5

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

CVE-2026-69918
HIGH 8.8

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-69916
HIGH 7.8

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69915
HIGH 7.0

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69914
MEDIUM 5.5

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69913
HIGH 8.1

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-69909
HIGH 7.8

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM