Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

25 741 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 372 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
25 741
Activement exploitées
372
Fenêtre de publication
1997-01-01 → 2026-09-17

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

25 741 entrées
CVE
CVE-2026-69691
HIGH 7.8

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69689
HIGH 8.0

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69688
HIGH 7.1

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-69687
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69686
HIGH 8.8

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69685
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-69684
MEDIUM 5.5

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-69682
HIGH 7.0

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69681
HIGH 8.0

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69680
HIGH 8.1

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-69678
HIGH 8.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVE-2026-69676
HIGH 8.8

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

CVE-2026-69674
MEDIUM 5.5

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.

CVE-2026-69672
MEDIUM 5.5

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-69671
HIGH 8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69669
HIGH 8.8

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

CVE-2026-69654
HIGH 7.0

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

CVE-2026-69652
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69648
HIGH 7.0

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVE-2026-69645
HIGH 7.0

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-69643
HIGH 8.0

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-69638
HIGH 8.4

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69631
HIGH 7.5

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-69630
HIGH 7.0

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69629
HIGH 8.8

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-69628
HIGH 8.8

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

CVE-2026-69627
MEDIUM 5.5

Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.

CVE-2026-69625
HIGH 8.0

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

CVE-2026-69624
MEDIUM 6.5

Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.

CVE-2026-69623
HIGH 8.0

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

CVE-2026-69621
HIGH 7.0

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69620
HIGH 8.1

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69619
HIGH 8.0

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

CVE-2026-69618
MEDIUM 5.5

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.

CVE-2026-69617
HIGH 7.0

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69616
MEDIUM 5.5

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.

CVE-2026-69613
HIGH 7.0

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-69612
HIGH 7.8

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69610
HIGH 7.0

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69609
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69608
HIGH 7.8

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69607
HIGH 7.5

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69606
HIGH 7.0

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69605
HIGH 7.0

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69604
HIGH 7.8

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69603
HIGH 8.8

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-69602
HIGH 7.1

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69601
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69600
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69599
HIGH 7.5

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa