Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

29 911 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
29 911
Activement exploitées
377
Fenêtre de publication
1997-01-01 → 2026-11-10

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 911 entrées
CVE
CVE-2026-83523
HIGH 8.8

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

CVE-2026-83522
HIGH 8.1

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83521
MEDIUM 6.5

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

CVE-2026-83519
CRITICAL 9.8

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83518
HIGH 7.8

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-83517
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-83516
HIGH 7.5

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83515
MEDIUM 6.5

Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.

CVE-2026-83514
HIGH 7.8

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83513
HIGH 7.8

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83511
HIGH 7.4

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83510
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83509
HIGH 7.0

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83508
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83507
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc…

CVE-2026-83506
HIGH 7.8

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83505
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83504
MEDIUM 4.7

Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.

CVE-2026-83500
MEDIUM 6.1

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-83499
HIGH 7.8

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81971
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges…

CVE-2026-81969
HIGH 7.8

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81964
MEDIUM 5.5

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-78459
HIGH 7.8

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-77496
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73027
HIGH 7.8

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-72969
HIGH 7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72968
HIGH 7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72955
HIGH 7.0

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

CVE-2026-72934
HIGH 7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-71347
MEDIUM 6.4

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate…

CVE-2026-70580
HIGH 8.8

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

CVE-2026-70566
HIGH 7.8

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70303
HIGH 7.8

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70299
HIGH 8.8

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70295
MEDIUM 5.5

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70294
MEDIUM 5.5

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70293
MEDIUM 5.5

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70292
MEDIUM 5.5

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70288
MEDIUM 5.5

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70286
HIGH 7.8

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70285
HIGH 7.8

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70284
MEDIUM 5.5

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70280
MEDIUM 4.4

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-70278
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-70277
MEDIUM 5.5

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

CVE-2026-70275
HIGH 8.8

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70274
HIGH 7.8

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70273
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70272
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa