CVE Watch412,870 in full archive

Vulnerabilities exploitable today

412,870in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,779

New KEV · 24H0

Exploit Today ≥ 701,703

Distribution · last window

Critical
5,666
High
22,249
Medium
20,641
Low
2,127

Filters

Window

Severity

Flags

Vulnerabilities412,441–412,480 · 412,870

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1182328.8 HIG

—

——0Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182298.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182288.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182258.8 HIG

—

——0Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182247.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182237.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182227.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182218.8 HIG

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182207.8 HIG

—

——0Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.10h CVE-2026-86531—

—

——0The embedded OpenEJB HTTP server does not limit the size of incoming request bodies or of multipart requests, and does not remove the temporary files it creates for multipart parts. A remote unauthenticated attacker can cause excessive memory or disk usage, leading to denial of service. Deployments using the Tomcat connectors are not affected. Users are recommended to block network access to the embedded HTTP server from untrusted clients, or to migrate to the Tomcat based TomEE distributions.14h CVE-2026-87758—

—

——0The remote EJB client does not verify that the hostname of the server it connects to matches the server's TLS certificate. An attacker able to intercept network traffic between an EJB client and server can impersonate the server and read or modify the traffic, including credentials and invocation data. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.14h CVE-2026-97402—

—

——0In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of an over-the-air BLE advertising payload. Any unauthenticated attacker within BLE radio range can broadcast a two-byte advertising payload that drives the Kura beacon-scanner thread into a tight infinite loop, pinning a CPU core and permanently halting beacon ingestion until the gateway is restarted. To trigger the attack, the iBeacon/Eddystone scanner component should be installed and active. By default the components are not installed or enabled.14h CVE-2026-97849—

—

——0The embedded Derby network service ignores its configured bind address and listens on all network interfaces. When the service is enabled, a remote attacker with network access can connect to the database server and read or modify data. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.14h CVE-2026-97867—

—

——0The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.14h CVE-2026-97870—

—

——0When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport security requirements are silently ignored. A remote unauthenticated attacker can invoke the exposed EJB methods without credentials or over an unencrypted connection. Only deployments that use the embedded HTTP server rather than Tomcat and rely on these settings are affected. Users are recommended to block network access to Hessian endpoints from untrusted clients, or to migrate to another remoting protocol.14h CVE-2026-97872—

—

——0When an EJB is exposed over the optional Hessian protocol inside an existing web application, some configured authentication and transport security settings are silently not enforced. A remote unauthenticated attacker can invoke the exposed EJB methods. Only deployments using the Hessian module with such settings are affected. Users are recommended to block network access to Hessian endpoints from untrusted clients, or to migrate to another remoting protocol.14h CVE-2026-97888—

—

——0The embedded HTTP server does not clear the security identity established during a request before its worker thread handles the next request. A remote unauthenticated attacker can have their request processed with the identity of a previously authenticated user, gaining that user's privileges. Only applications served by the embedded HTTP server that authenticate programmatically or via basic authentication are affected. Users are recommended to block network access to the embedded HTTP server from untrusted clients, or to migrate to the Tomcat based TomEE distributions.14h CVE-2026-97890—

—

——0The embedded HTTP server does not invalidate the previous session identifier when an application changes the session id, e.g. after login. An attacker who can plant a session identifier in a victim's browser can hijack the victim's authenticated session. Users are recommended to block network access to the embedded HTTP server from untrusted clients, or to migrate to the Tomcat based TomEE distributions.14h CVE-2026-102803—

—

——0Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5 - A logged-in customer could redeem a single gift voucher, or a single-use coupon (`max_uses` / `max_customer_uses` = 1), on more than one order. By starting several checkout sessions and carrying each to the confirm step before submitting any of them, every order independently saw the voucher's full balance or the coupon's unused slot, because the balance/usage calculations and the final placement check both only looked at orders that had already left the "New" state.13h CVE-2026-1074055.5 MED

—

——0An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.12h CVE-2026-1182198.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182188.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182178.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182168.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182157.8 HIG

—

——0Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.10h CVE-2026-1182146.5 MED

—

——0Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.10h CVE-2026-1181537.5 HIG

—

——0Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.10h CVE-2026-1181526.5 MED

—

——0Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.10h CVE-2026-1181517.2 HIG

—

——0External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.10h CVE-2026-1181508.8 HIG

—

——0Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.10h CVE-2026-1181498.8 HIG

—

——0Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.10h CVE-2026-1181487.5 HIG

—

——0Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.10h CVE-2026-1181468.8 HIG

—

——0Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.10h CVE-2026-1181405.5 MED

—

——0Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.10h CVE-2026-1181387.8 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client for NFS allows an authorized attacker to elevate privileges locally.10h CVE-2026-1181377.8 HIG

—

——0Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.10h CVE-2026-1181267.8 HIG

—

——0Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.10h CVE-2026-1181257.0 HIG

—

——0Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.10h CVE-2026-1181247.0 HIG

—

——0Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.10h CVE-2026-1181237.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.10h