Vulnerabilities exploitable today
412,870in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,779
New KEV · 24H0
Exploit Today ≥ 701,703
Distribution · last window
- Critical5,666
- High22,249
- Medium20,641
- Low2,127
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-111259——
——0The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for authentication. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.14hCVE-2026-111260——
——0The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insufficient entropy. A remote attacker who predicts these values can forge an authentication callback that logs a victim into the attacker's account, and the replay protection for ID tokens is weakened. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.14hCVE-2026-1216839.4 CRI—
——0Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.14hCVE-2026-1199348.8 HIG—
——0Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.11hCVE-2026-1199337.8 HIG—
——0Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199327.5 HIG—
——0Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.11hCVE-2026-1199317.0 HIG—
——0Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199297.8 HIG—
——0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199287.0 HIG—
——0Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199258.8 HIG—
——0Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199217.0 HIG—
——0Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199197.0 HIG—
——0Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199186.8 MED—
——0Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.11hCVE-2026-1199177.8 HIG—
——0Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199168.8 HIG—
——0Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199146.7 MED—
——0Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199137.0 HIG—
——0Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199126.7 MED—
——0Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199104.7 MED—
——0Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose information locally.11hCVE-2026-1199095.9 MED—
——0Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.11hCVE-2026-1199088.8 HIG—
——0Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.11hCVE-2026-1199077.8 HIG—
——0Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199067.8 HIG—
——0Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199054.9 MED—
——0Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.11hCVE-2026-1199047.8 HIG—
——0Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199037.8 HIG—
——0Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199016.4 MED—
——0Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.11hCVE-2026-1199007.3 HIG—
——0Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.11hCVE-2025-34786——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.22dCVE-2026-1198927.8 HIG—
——0Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.10hCVE-2026-1198905.3 MED—
——0Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.10hCVE-2026-1198896.5 MED—
——0Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.10hCVE-2026-1198887.0 HIG—
——0Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.10hCVE-2026-1198876.5 MED—
——0Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.10hCVE-2026-1198867.8 HIG—
——0Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.10hCVE-2026-1198856.8 MED—
——0Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.10hCVE-2026-1198846.8 MED—
——0Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.10hCVE-2025-34785——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.22dCVE-2026-1198833.3 LOW—
——0Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally.10hCVE-2026-1198825.3 MED—
——0Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.10h