Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,288 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,288
Actively exploited
303
Publication window
1997-01-01 → 2026-10-15

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,288 entries Windows Clear all
CVE
CVE-2026-69369
MEDIUM 5.5

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-69368
HIGH 7.8

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69367
MEDIUM 5.5

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69366
HIGH 7.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-69365
HIGH 8.0

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

CVE-2026-69364
HIGH 7.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t…

CVE-2026-69362
HIGH 7.0

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69360
HIGH 8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69359
HIGH 7.8

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69358
HIGH 7.1

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVE-2026-69357
HIGH 7.1

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69353
MEDIUM 5.5

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.

CVE-2026-69352
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69351
MEDIUM 5.5

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclo…

CVE-2026-69350
MEDIUM 6.7

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69349
MEDIUM 5.7

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

CVE-2026-69348
HIGH 7.8

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69347
HIGH 7.4

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2026-69346
HIGH 8.0

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVE-2026-69345
MEDIUM 5.5

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69344
MEDIUM 5.5

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-69343
MEDIUM 5.5

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69342
HIGH 7.5

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-69341
HIGH 7.0

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-69340
HIGH 7.1

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69339
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information…

CVE-2026-69338
HIGH 7.1

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69337
HIGH 7.1

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

CVE-2026-69336
HIGH 7.1

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69335
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69334
HIGH 8.8

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69333
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69332
HIGH 8.0

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69331
HIGH 7.0

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69329
HIGH 7.5

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVE-2026-69328
HIGH 7.8

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69325
HIGH 8.1

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.

CVE-2026-69324
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-69323
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69322
HIGH 8.0

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-69321
MEDIUM 5.5

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

CVE-2026-69319
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevat…

CVE-2026-69318
MEDIUM 5.5

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-69317
MEDIUM 5.7

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.

CVE-2026-69316
MEDIUM 4.7

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69315
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information loc…

CVE-2026-69314
HIGH 7.1

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69313
HIGH 7.1

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69312
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69311
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM