Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,627
Actively exploited
374
Publication window
1997-01-01 → 2026-10-30

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries
CVE
CVE-2026-62817
HIGH 8.8

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62816
HIGH 8.8

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62815
CRITICAL 9.8

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-62814
MEDIUM 6.5

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2026-62812
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62811
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62807
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62803
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62800
HIGH 8.8

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62799
HIGH 7.8

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62798
MEDIUM 5.5

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62797
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62796
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62795
HIGH 8.8

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62793
MEDIUM 5.5

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62792
HIGH 8.1

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-62790
HIGH 8.8

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62788
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62787
HIGH 7.5

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-62786
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62785
HIGH 8.8

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62784
HIGH 8.8

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

CVE-2026-62783
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62782
MEDIUM 6.5

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-62781
HIGH 8.1

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-62780
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62779
HIGH 7.8

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-62778
HIGH 8.1

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62777
HIGH 7.8

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62776
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62775
MEDIUM 5.5

Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.

CVE-2026-62774
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62773
HIGH 7.0

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62772
HIGH 7.8

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-62771
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62770
HIGH 7.8

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-62769
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62768
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-62766
HIGH 7.0

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62761
HIGH 7.8

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62758
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62757
MEDIUM 5.3

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62755
HIGH 7.8

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62754
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62753
HIGH 7.0

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62752
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62751
HIGH 7.8

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62750
MEDIUM 6.5

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.

CVE-2026-62749
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62748
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM