CVE Watch412,870 in full archive

Vulnerabilities exploitable today

412,870in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,779

New KEV · 24H0

Exploit Today ≥ 701,703

Distribution · last window

Critical
5,666
High
22,249
Medium
20,641
Low
2,127

Filters

Window

Severity

Flags

Vulnerabilities411,881–411,920 · 412,870

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-961717.0 HIG

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-961687.0 HIG

—

——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-961648.8 HIG

—

——0Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.9h CVE-2026-961627.8 HIG

—

——0Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.6h CVE-2026-961607.8 HIG

—

——0Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-961587.0 HIG

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.6h CVE-2026-120350—

—

——0The Vaadin Rich Text Editor exports a video embed without escaping its value, and then parses the resulting HTML into live DOM. A value crafted to break out of the href attribute therefore runs script in the viewer's browser. An attacker who can edit shared content pastes a video embed carrying the payload, the delta is stored, and the script runs when any user opens the page, including in read only mode. Only content persisted through asDelta() is affected. The default HTML value, set and read through setValue and getValue, is sanitized on the server with a safelist that has no iframe, so the embed does not survive that path. Vaadin 24 and older are not affected: they build the HTML value from the editor's own innerHTML, which the browser escapes. Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include: Product version Vaadin 25.0.0 - 25.0.13 Vaadin 25.1.0 - 25.1.13 Vaadin 25.2.0 - 25.2.12 Vaadin 25.3.0 - 25.3.4 Mitigation No fixed release on this line, upgrade to 25.2.13 or newer No fixed release on this line, upgrade to 25.2.13 or newer Upgrade to 25.2.13 Upgrade to 25.3.519h CVE-2026-1211916.5 MED

—

——0Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects eta-remote: from 0.0.2 before 0.0.3.15h CVE-2026-1257076.1 MED

—

——0A flaw was found in GStreamer's MXF demuxer. When an application processes a crafted MXF file, an off-by-one bounds check can allow a one-byte write past the logical end of a temporal offset array. This may corrupt memory and cause the application to crash. The extent of the impact has not been demonstrated by a runtime test.8h CVE-2017-4067—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none24d CVE-2026-961347.5 HIG

—

——0Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.5h CVE-2026-961335.5 MED

—

——0Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5h CVE-2026-1257094.2 MED

—

——0A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigger a buffer overflow, potentially resulting in a Denial of Service (DoS) or memory corruption.12h CVE-2026-1257127.5 HIG

—

——0A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory.14h CVE-2026-961297.8 HIG

—

——0Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-961277.8 HIG

—

——0Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.6h CVE-2026-961267.8 HIG

—

——0Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2025-59396—

—

——0Rejected reason: Not a security vulnerability1d CVE-2024-58244—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that was not assigned to any issues during 2024. Notes: none.2d CVE-2024-58243—

—

——0Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.6h CVE-2024-58242—

—

——0Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.5h CVE-2026-961125.5 MED

—

——0Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.5h CVE-2026-961105.5 MED

—

——0Use after free in Windows OLE allows an authorized attacker to disclose information locally.5h CVE-2026-961077.0 HIG

—

——0Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.6h CVE-2026-961037.8 HIG

—

——0Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6h CVE-2026-961027.8 HIG

—

——0Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6h CVE-2026-961015.5 MED

—

——0Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.5h CVE-2026-960977.0 HIG

—

——0Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.6h CVE-2026-960826.5 MED

—

——0Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.5h CVE-2026-960817.5 HIG

—

——0Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.9h CVE-2025-32930—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA.1d CVE-2024-23404—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2024-23403—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2026-960789.8 CRI

—

——0Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.11h CVE-2026-122667.6 HIG

—

——0Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposure through insufficiently protected LDAP settings API.9h CVE-2026-960777.5 HIG

—

——0Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.5h CVE-2026-960767.8 HIG

—

——0Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.6h CVE-2026-960757.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.6h