Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,288 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,288
Actively exploited
303
Publication window
1997-01-01 → 2026-10-15

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,288 entries Windows Clear all
CVE
CVE-2026-62700
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62699
MEDIUM 6.8

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-62698
HIGH 7.8

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

CVE-2026-62696
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62695
HIGH 7.8

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-62693
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele…

CVE-2026-62692
HIGH 7.8

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-62690
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-62688
HIGH 7.8

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-61939
HIGH 7.0

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-61938
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61937
HIGH 7.8

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-61936
MEDIUM 5.5

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-61934
HIGH 7.8

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61933
MEDIUM 5.5

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-61932
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-61930
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61929
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61928
MEDIUM 5.5

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

CVE-2026-61927
HIGH 7.0

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61926
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61925
HIGH 7.8

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61924
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61923
HIGH 7.8

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61921
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61920
MEDIUM 6.6

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a…

CVE-2026-61918
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61368
MEDIUM 5.0

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-61367
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61366
HIGH 7.0

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-61365
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61363
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61361
HIGH 7.0

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

CVE-2026-61360
MEDIUM 5.5

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-61359
HIGH 7.8

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-61358
HIGH 7.8

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate …

CVE-2026-61357
HIGH 7.8

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61356
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61355
HIGH 7.8

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61353
HIGH 7.8

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61352
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute…

CVE-2026-61350
MEDIUM 4.6

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-61349
HIGH 7.8

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61348
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-61347
MEDIUM 5.5

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-61346
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61345
MEDIUM 6.5

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-59138
MEDIUM 6.5

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-59137
MEDIUM 5.5

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM