Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Vulnérabilités

Vulnérabilités des apps suivies

29 911 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 377 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes
29 911
Activement exploitées
377
Fenêtre de publication
1997-01-01 → 2026-11-10

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 911 entrées
CVE
CVE-2026-70024
CRITICAL 9.8

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70023
HIGH 7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021
HIGH 7.0

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70017
MEDIUM 5.5

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-70015
HIGH 7.8

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70014
HIGH 7.5

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-70013
HIGH 8.1

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70011
MEDIUM 5.5

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

CVE-2026-70010
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008
HIGH 7.8

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70006
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70005
MEDIUM 5.9

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70004
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69999
MEDIUM 5.5

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

CVE-2026-69998
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69997
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69996
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69995
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69994
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69992
HIGH 7.5

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69991
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69988
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69987
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69986
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69985
HIGH 8.8

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69984
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69982
MEDIUM 5.9

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69979
MEDIUM 5.5

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-69978
MEDIUM 5.6

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69977
HIGH 7.0

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-69976
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69974
MEDIUM 4.7

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-69973
MEDIUM 6.5

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over …

CVE-2026-69971
MEDIUM 5.5

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-69970
HIGH 7.0

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69969
MEDIUM 4.7

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69968
MEDIUM 6.5

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69967
MEDIUM 5.5

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69966
HIGH 7.8

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
HIGH 7.0

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69963
HIGH 7.8

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69959
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69958
MEDIUM 6.8

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69957
HIGH 7.8

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69955
MEDIUM 6.5

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69954
MEDIUM 5.5

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69953
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69952
HIGH 7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69950
HIGH 7.8

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa