Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

29 911 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
29 911
Activement exploitées
377
Fenêtre de publication
1997-01-01 → 2026-11-10

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 911 entrées
CVE
CVE-2026-70106
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104
HIGH 7.8

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70103
HIGH 7.8

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70102
HIGH 7.8

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70097
MEDIUM 5.6

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an au…

CVE-2026-70096
CRITICAL 9.8

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70095
HIGH 7.5

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093
HIGH 7.8

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092
HIGH 7.8

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70090
MEDIUM 5.5

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

CVE-2026-70089
HIGH 8.8

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70087
MEDIUM 5.5

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70086
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70085
MEDIUM 5.5

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70084
MEDIUM 5.5

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-70083
MEDIUM 5.5

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70082
HIGH 7.5

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70079
HIGH 7.5

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70077
MEDIUM 4.7

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70076
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70075
MEDIUM 4.4

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security fea…

CVE-2026-70074
MEDIUM 5.5

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-70072
MEDIUM 6.5

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70071
MEDIUM 5.5

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70069
HIGH 8.8

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-70068
HIGH 8.8

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70067
HIGH 7.0

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70066
HIGH 7.0

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70064
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70063
MEDIUM 4.7

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70062
HIGH 8.1

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060
HIGH 7.8

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70059
HIGH 7.8

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70058
HIGH 7.5

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70057
MEDIUM 5.5

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVE-2026-70056
HIGH 7.0

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70055
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose informat…

CVE-2026-70054
HIGH 7.8

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-70052
HIGH 7.8

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

CVE-2026-70051
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-70048
HIGH 7.8

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70045
HIGH 7.0

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-70044
MEDIUM 5.5

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

CVE-2026-70041
MEDIUM 5.5

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-70038
HIGH 8.1

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70033
HIGH 7.5

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

CVE-2026-70031
HIGH 7.5

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-70027
HIGH 7.8

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-70026
HIGH 7.0

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025
MEDIUM 5.3

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa