Vulnerabilities
Tracked app vulnerabilities
19,270 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,270
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-13
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-83498
HIGH 7.8
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-81960
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81959
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81958
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81957
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81956
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81955
HIGH 8.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-81954
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81953
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81951
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81950
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81949
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81948
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81947
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81401
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81400
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81399
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81398
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81397
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81396
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81395
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81394
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
|
CVE-2026-81393
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81392
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81391
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81390
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-81389
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81388
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81387
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
|
CVE-2026-81386
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2026-81355
HIGH 7.5
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
|
CVE-2026-81354
HIGH 8.2
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80096
HIGH 8.8
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-80093
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80090
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-80085
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80083
HIGH 8.8
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-80080
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80079
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-80075
HIGH 7.8
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80073
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78525
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78523
MEDIUM 5.9
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-78522
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-78521
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78520
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78519
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78518
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78517
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78516
MEDIUM 4.3
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.