Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

25 748 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 372 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
25 748
Activement exploitées
372
Fenêtre de publication
1997-01-01 → 2026-09-17

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

25 748 entrées
CVE
CVE-2026-68800
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68799
MEDIUM 5.5

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68797
MEDIUM 5.5

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68796
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68795
HIGH 7.8

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68794
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68793
HIGH 7.8

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-66810
MEDIUM 5.5

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-66809
MEDIUM 5.5

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-66806
MEDIUM 5.5

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-66804
HIGH 7.8

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

CVE-2026-66802
HIGH 8.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized a…

CVE-2026-66799
HIGH 7.8

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

CVE-2026-65814
HIGH 7.8

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-65807
HIGH 8.8

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-65799
MEDIUM 6.7

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65798
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65797
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65796
HIGH 8.1

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

CVE-2026-65795
MEDIUM 6.7

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65794
MEDIUM 6.5

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-65791
CRITICAL 9.8

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

CVE-2026-65790
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-65789
HIGH 8.1

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-65788
HIGH 7.0

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65787
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65786
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65785
MEDIUM 6.5

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-65784
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-65783
HIGH 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65782
HIGH 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65781
HIGH 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65780
HIGH 7.0

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65779
HIGH 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65778
HIGH 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65777
MEDIUM 5.3

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.

CVE-2026-65776
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65775
HIGH 7.8

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65774
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-65773
HIGH 7.8

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-65769
MEDIUM 6.5

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.

CVE-2026-65681
HIGH 7.5

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.

CVE-2026-65679
HIGH 8.1

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

CVE-2026-65678
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65672
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-65671
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-65662
MEDIUM 5.5

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-64917
MEDIUM 5.5

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-64915
HIGH 7.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-64907
HIGH 7.8

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa