Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,557 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,557
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,557 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,557 entries High Windows Clear all
CVE
CVE-2026-83977
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83976
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83973
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83972
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83971
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83970
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968
HIGH 7.8
Windows

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83952
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83942
HIGH 7.8
Windows

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83940
HIGH 7.0
Windows

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83939
HIGH 8.2
Windows

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-83498
HIGH 7.8
Windows

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81960
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81959
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81957
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81956
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81955
HIGH 8.8
Windows

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-81954
HIGH 7.8
Microsoft Excel Office

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81953
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81951
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81950
HIGH 7.8
Microsoft Excel Office

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81949
HIGH 7.8
Microsoft Excel Office

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81948
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81947
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81398
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81397
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81396
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81389
HIGH 7.0
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81388
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81386
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81355
HIGH 7.5
Windows

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-81354
HIGH 8.2
Windows

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80096
HIGH 8.8
Windows

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80093
HIGH 7.0
Windows

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80085
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80083
HIGH 8.8
Windows

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-80080
HIGH 8.8
Microsoft Word Office

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80075
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-78525
HIGH 8.8
Microsoft Word Office

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78521
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78519
HIGH 8.8
Microsoft Outlook Office

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78518
HIGH 8.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78517
HIGH 8.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514
HIGH 8.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512
HIGH 8.8
Microsoft Word Office

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM