PULSEUnderground Intel

LIVE30signals / 24h

FEED

ransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Other

CVE Watch412,870 in full archive

Vulnerabilities exploitable today

412,870in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,779

New KEV · 24H0

Exploit Today ≥ 701,703

Distribution · last window

Critical
5,666
High
22,249
Medium
20,641
Low
2,127

Filters

Filters

Window

Severity

Flags

Vulnerabilities411,961–412,000 · 412,870

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-8770—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none24d CVE-2026-1248988.8 HIG

——0Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1248998.8 HIG

——0Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249009.6 CRI

——0Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.12h CVE-2026-1249048.8 HIG

——0Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.12h CVE-2026-1249078.8 HIG

——0Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249094.3 MED

——0Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124910—

——0Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124911—

——0Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.15h CVE-2026-124912—

——0Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124913—

——0Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249158.8 HIG

——0Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249179.6 CRI

——0Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249188.8 HIG

——0Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-1249198.8 HIG

——0Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124920—

——0Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.12h CVE-2026-124921—

——0Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.12h CVE-2026-1249228.8 HIG

——0Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124923—

——0Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.12h CVE-2026-1249248.8 HIG

——0Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124931—

——0Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-124933—

——0Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.10h CVE-2026-959445.5 MED

——0Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.5h CVE-2026-959427.8 HIG

——0Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959387.0 HIG

——0Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959337.8 HIG

——0Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.6h CVE-2026-959327.8 HIG

——0Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959237.0 HIG

——0Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.6h CVE-2026-959227.0 HIG

——0Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959207.8 HIG

——0Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6h CVE-2026-959135.9 MED

——0Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.5h CVE-2026-959106.7 MED

——0Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.5h CVE-2026-959097.8 HIG

——0Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959085.5 MED

——0Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.5h CVE-2026-959067.0 HIG

——0Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-959056.8 MED

——0Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.6h CVE-2026-959027.8 HIG

——0Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.6h CVE-2026-959019.8 CRI

——0Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.11h CVE-2026-958987.8 HIG

——0Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.6h CVE-2026-958967.8 HIG

——0Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.9h