Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

29 911 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
29 911
Activement exploitées
377
Fenêtre de publication
1997-01-01 → 2026-11-10

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 911 entrées
CVE
CVE-2026-97789
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-97788
HIGH 7.5

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-97787
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow…

CVE-2026-96953
HIGH 7.8

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-96952
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-96951
HIGH 8.8 KEV

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu…

CVE-2026-96950
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96949
HIGH 7.0

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96948
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio…

CVE-2026-96947
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96946
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96945
HIGH 7.5

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-96944
MEDIUM 5.5

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall…

CVE-2026-96939
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-96938
MEDIUM 6.7

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96937
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96935
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96934
CRITICAL 9.8

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96933
HIGH 7.8

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96932
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e…

CVE-2026-96931
HIGH 7.8

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96930
MEDIUM 5.5

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-96929
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96928
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96927
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96926
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-96925
MEDIUM 5.5

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96924
CRITICAL 9.8

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

CVE-2026-96923
HIGH 7.0

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96921
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo…

CVE-2026-96920
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96919
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96918
HIGH 7.8

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96917
HIGH 8.8

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96916
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96915
HIGH 7.8

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96914
HIGH 8.8

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-96913
HIGH 8.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96912
HIGH 7.8

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96911
HIGH 7.8

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall…

CVE-2026-96910
MEDIUM 5.5

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-96909
CRITICAL 9.8

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

CVE-2026-96868
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96867
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96866
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96865
MEDIUM 5.6

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information …

CVE-2026-96864
CRITICAL 9.8

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-96863
MEDIUM 6.8

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96862
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96861
HIGH 7.5

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa