Vulnerabilities exploitable today
412,870in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,779
New KEV · 24H0
Exploit Today ≥ 701,703
Distribution · last window
- Critical5,666
- High22,249
- Medium20,641
- Low2,127
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-960747.8 HIG—
——0Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.6hCVE-2026-960595.5 MED—
——0Use after free in HID class driver allows an authorized attacker to disclose information locally.5hCVE-2026-960584.6 MED—
——0Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.5hCVE-2026-960577.8 HIG—
——0Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.6hCVE-2026-960567.8 HIG—
——0Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.6hCVE-2026-960557.8 HIG—
——0Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.6hCVE-2026-960547.0 HIG—
——0Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.9hCVE-2026-960537.8 HIG—
——0Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.6hCVE-2026-125727.2 HIG—
——0Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.9hCVE-2026-960527.8 HIG—
——0Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.6hCVE-2026-960517.0 HIG—
——0Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.6hCVE-2026-960484.7 MED—
——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5hCVE-2026-960477.0 HIG—
——0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6hCVE-2024-21709——
——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2dCVE-2026-960437.0 HIG—
——0Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.6hCVE-2026-960427.0 HIG—
——0Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.6hCVE-2026-960415.5 MED—
——0Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.5hCVE-2026-960387.8 HIG—
——0Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.6hCVE-2026-960197.0 HIG—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.6hCVE-2026-960186.5 MED—
——0Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.5hCVE-2026-960174.9 MED—
——0Use after free in DNS Server allows an authorized attacker to deny service over a network.5hCVE-2026-960167.8 HIG—
——0Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.6hCVE-2013-5265——
——0Rejected reason: This candidate is unused by its CNA.24dCVE-2026-959775.5 MED—
——0Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.5hCVE-2013-5267——
——0Rejected reason: This candidate is unused by its CNA.24dCVE-2016-7336——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none24dCVE-2026-581147.5 HIG—
——0A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.12hCVE-2026-27318——
——0Rejected reason: Not used24dCVE-2026-959477.8 HIG—
——0An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.
An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.
The security update addresses the vulnerability by correcting the way that WER handles and executes files.5hCVE-2026-959465.5 MED—
——0Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5hCVE-2017-4531——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none24dCVE-2026-62181——
——0Rejected reason: This CVE is a duplicate of another CVE.25dCVE-2026-1248628.8 HIG—
——0Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2026-1248638.8 HIG—
——0Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2026-1248649.6 CRI—
——0Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2026-1248658.8 HIG—
——0Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2018-4685——
——0Rejected reason: This candidate is unused by its CNA.24dCVE-2026-124879——
——0Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2026-1248848.8 HIG—
——0Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10hCVE-2026-1248858.8 HIG—
——0Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h