Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,627
Actively exploited
374
Publication window
1997-01-01 → 2026-10-30
All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries
CVE
CVE-2026-70304
MEDIUM 6.7
Windows

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-68820
HIGH 7.0 KEV
Windows

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-68819
MEDIUM 5.9
Windows

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-68817
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68816
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68815
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68814
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68812
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68811
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68810
HIGH 7.8
Microsoft Excel Office

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68809
MEDIUM 5.5
Microsoft PowerPoint Office

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-68808
MEDIUM 5.5
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68807
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68806
HIGH 7.8
Microsoft Excel Office

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68805
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68804
HIGH 7.8
Microsoft Excel Office

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68803
HIGH 7.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68802
MEDIUM 5.5
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68801
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68800
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68799
MEDIUM 5.5
Microsoft Excel Office

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68797
MEDIUM 5.5
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68796
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68795
HIGH 7.8
Microsoft Excel Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68794
HIGH 7.8
Microsoft Excel Office

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68793
HIGH 7.8
Microsoft Excel Office

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-66810
MEDIUM 5.5
Microsoft Word Office

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66809
MEDIUM 5.5
Microsoft Word Office

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66806
MEDIUM 5.5
Microsoft Word Office

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66804
HIGH 7.8
Windows

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-66802
HIGH 8.1
Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized a…
CVE-2026-66799
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-65814
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65807
HIGH 8.8
Microsoft Excel Office

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-65799
MEDIUM 6.7
Windows

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65798
MEDIUM 6.7
Windows

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65797
MEDIUM 6.7
Windows

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65796
HIGH 8.1
Windows

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-65795
MEDIUM 6.7
Windows

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65794
MEDIUM 6.5
Windows

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-65791
CRITICAL 9.8
Windows

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-65790
HIGH 7.8
Windows

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65789
HIGH 8.1
Windows

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-65788
HIGH 7.0
Windows

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65787
HIGH 7.8
Windows

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65786
HIGH 7.8
Windows

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65785
MEDIUM 6.5
Windows

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-65784
MEDIUM 5.5
Windows

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65783
HIGH 7.0
Windows

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65782
HIGH 7.0
Windows

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM