Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,288 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,288
Actively exploited
303
Publication window
1997-01-01 → 2026-10-15
All CVEs 19,288 CISA KEV 303 Public exploit 565 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,288 entries Windows Clear all
CVE
CVE-2026-56649
MEDIUM 5.9
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to e…
CVE-2026-56648
HIGH 7.5
Windows

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
CVE-2026-56647
HIGH 8.8
Windows

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.
CVE-2026-56644
HIGH 7.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-56643
HIGH 7.8
Windows

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-56194
HIGH 8.8
Windows

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.
CVE-2026-56190
CRITICAL 9.8
Windows

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
CVE-2026-56189
HIGH 7.8
Windows

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
CVE-2026-56188
CRITICAL 9.8
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to…
CVE-2026-56187
HIGH 7.0
Windows

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-56186
HIGH 8.1
Windows

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
CVE-2026-56184
MEDIUM 5.5
Windows

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-56183
HIGH 7.0
Windows

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-56182
HIGH 7.8
Windows

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-56181
HIGH 8.3
Windows

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-56176
HIGH 7.8
Microsoft Office Office
Windows

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-56175
HIGH 7.8
Windows

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-56173
HIGH 7.0
Windows

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.
CVE-2026-56168
MEDIUM 6.5
Windows

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.
CVE-2026-56159
CRITICAL 9.8
Windows

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-55949
HIGH 7.8
Microsoft Excel Office

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55947
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55898
MEDIUM 6.1
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55142
MEDIUM 5.5
Microsoft Word Office

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55141
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55138
MEDIUM 5.5
Microsoft Excel Office

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55137
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55136
HIGH 7.8
Microsoft Excel Office

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55134
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132
HIGH 7.8
Microsoft Word Office

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55131
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55130
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128
HIGH 7.8
Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55127
HIGH 7.8
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55124
MEDIUM 5.5
Microsoft Word Office

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55123
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55122
HIGH 7.1
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55120
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55058
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55055
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55054
MEDIUM 6.5
Microsoft Excel Microsoft Office Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-55053
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55050
MEDIUM 5.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55048
HIGH 7.8
Microsoft Excel Office

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55046
MEDIUM 5.5
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55044
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55043
HIGH 7.8
Microsoft PowerPoint Office

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55041
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55039
HIGH 7.8
Microsoft Excel Office

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55038
HIGH 7.8
Microsoft Word Office

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM