Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,557 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,557
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,557 entries High Windows Clear all
CVE
CVE-2026-62780
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62779
HIGH 7.8

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-62778
HIGH 8.1

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62777
HIGH 7.8

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62776
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62774
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62773
HIGH 7.0

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62772
HIGH 7.8

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-62771
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62770
HIGH 7.8

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-62768
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-62766
HIGH 7.0

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62761
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62758
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62755
HIGH 7.8

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62754
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62753
HIGH 7.0

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62752
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62751
HIGH 7.8

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62749
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62748
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62747
HIGH 7.8

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62741
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62739
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62737
HIGH 7.8

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62736
HIGH 7.8

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62735
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62734
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62733
HIGH 7.8

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62732
HIGH 7.8

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62729
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62728
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62726
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62725
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62724
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62723
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62722
HIGH 7.8

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62721
HIGH 7.8

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

CVE-2026-62719
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62717
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62713
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62712
HIGH 7.8

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62711
HIGH 7.8

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62710
HIGH 7.8

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62707
HIGH 7.8

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-62705
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev…

CVE-2026-62701
HIGH 7.8

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62700
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62698
HIGH 7.8

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

CVE-2026-62696
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM