how exploit developer usually searching for applications to test ?

hello all,

i have learned many topics that will help me to discover and exploit vulnerabilities in windows apps 32bit .
so usually people if they want to scan an application where they search for ?
like i want to test an application to get CVE for example , where to search ? since this is a desktop app not web .