Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,288 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,288
Actively exploited
303
Publication window
1997-01-01 → 2026-10-15

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,288 entries Windows Clear all
CVE
CVE-2026-68886
MEDIUM 5.5

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

CVE-2026-68885
HIGH 7.8

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68884
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-68881
MEDIUM 5.5

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-68880
HIGH 8.0

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-68878
HIGH 8.0

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-68877
HIGH 7.8

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-68876
HIGH 8.0

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-68875
HIGH 7.8

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-68874
MEDIUM 5.7

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.

CVE-2026-68873
MEDIUM 5.5

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information local…

CVE-2026-68852
MEDIUM 5.5

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

CVE-2026-68851
MEDIUM 5.5

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-68850
HIGH 7.8

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-68849
MEDIUM 4.7

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-68848
HIGH 7.8

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-68847
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-68846
HIGH 7.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-68845
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68844
HIGH 7.8

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-68843
MEDIUM 5.5

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

CVE-2026-68842
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information…

CVE-2026-68841
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68840
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv…

CVE-2026-68839
CRITICAL 9.8

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-68838
HIGH 8.0

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68837
HIGH 7.0

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68835
HIGH 7.1

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVE-2026-68834
HIGH 8.0

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68833
MEDIUM 6.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-68832
HIGH 7.8

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68831
MEDIUM 5.5

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

CVE-2026-68830
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose …

CVE-2026-68828
HIGH 8.8

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-68827
HIGH 8.0

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

CVE-2026-68825
HIGH 7.0

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-68824
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho…

CVE-2026-62813
HIGH 7.5

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-62810
HIGH 7.8

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-62801
MEDIUM 6.5

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security featu…

CVE-2026-62762
MEDIUM 6.5

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-62759
HIGH 7.5

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-62744
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-62706
HIGH 8.8

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-62697
HIGH 7.8

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-62694
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-56198
HIGH 7.8

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVE-2026-56177
HIGH 7.8

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

CVE-2026-56172
HIGH 7.8

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-50349
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM