Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,557 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,557
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,557 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,557 entries High Windows Clear all
CVE
CVE-2026-55141
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55137
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55136
HIGH 7.8
Microsoft Excel Office

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55134
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132
HIGH 7.8
Microsoft Word Office

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55131
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55130
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128
HIGH 7.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55127
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55123
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55122
HIGH 7.1
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55120
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55058
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55055
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55053
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55048
HIGH 7.8
Microsoft Excel Office

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55044
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55043
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55041
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55039
HIGH 7.8
Microsoft Excel Office

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55038
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55037
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55036
HIGH 7.8
Microsoft Excel Office

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55033
HIGH 7.8
Microsoft Word Office

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
HIGH 7.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55031
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55029
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55025
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55024
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54128
HIGH 8.4
Windows

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
CVE-2026-54125
HIGH 7.8
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile…
CVE-2026-54124
HIGH 7.8
Windows

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
CVE-2026-54121
HIGH 8.8
Windows

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-54115
HIGH 7.8
Windows

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.
CVE-2026-50692
HIGH 8.8
Windows

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-50689
HIGH 7.8
Windows

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
CVE-2026-50688
HIGH 7.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50687
HIGH 8.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50686
HIGH 8.1
Windows

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-50685
HIGH 7.5
Windows

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-50683
HIGH 8.0
Windows

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-50682
HIGH 7.1
Windows

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.
CVE-2026-50680
HIGH 8.2
Windows

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-50679
HIGH 7.8
Windows

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-50677
HIGH 7.8
Windows

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-50676
HIGH 7.8
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege…
CVE-2026-50674
HIGH 7.0
Windows

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-50673
HIGH 7.8
Windows

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50672
HIGH 7.0
Windows

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-50670
HIGH 8.8
Windows

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM