CVE Watch412,870 in full archive

Vulnerabilities exploitable today

412,870in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,779

New KEV · 24H0

Exploit Today ≥ 701,703

Distribution · last window

Critical
5,666
High
22,249
Medium
20,641
Low
2,127

Filters

Window

Severity

Flags

Vulnerabilities412,201–412,240 · 412,870

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-8055—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none24d CVE-2024-9171—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.1d CVE-2024-23410—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2026-1022248.4 HIG

—

——0Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.8h CVE-2026-1022307.4 HIG

—

——0Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.8h CVE-2026-1055867.0 HIG

—

——0Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055845.5 MED

—

——0Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.9h CVE-2026-1055837.0 HIG

—

——0Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055827.0 HIG

—

——0Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055667.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055657.0 HIG

—

——0Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055624.7 MED

—

——0Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.9h CVE-2026-1055617.5 HIG

—

——0Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.9h CVE-2026-1055607.2 HIG

—

——0Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.9h CVE-2026-1022368.6 HIG

—

——0Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.8h CVE-2025-27570—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused23d CVE-2026-1028685.5 MED

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.8h CVE-2026-1055467.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055457.0 HIG

—

——0An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.9h CVE-2026-1035717.0 HIG

—

——0An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.8h CVE-2024-23414—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2026-1055327.8 HIG

—

——0Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055315.5 MED

—

——0External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.9h CVE-2026-1055305.5 MED

—

——0Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.9h CVE-2026-1055297.0 HIG

—

——0Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally.9h CVE-2026-1055287.8 HIG

—

——0Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.9h CVE-2024-23417—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2026-1050227.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1050238.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1050247.0 HIG

—

——0Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.8h CVE-2026-1050257.8 HIG

—

——0Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1050268.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1050287.8 HIG

—

——0Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054908.8 HIG

—

——0Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054938.8 HIG

—

——0Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054947.8 HIG

—

——0Untrusted search path in Azure NFS mount helper (aznfs) allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054958.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054968.8 HIG

—

——0Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054978.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h CVE-2026-1054988.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8h