CVE Watch412,870 in full archive

Vulnerabilities exploitable today

412,870in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,779

New KEV · 24H0

Exploit Today ≥ 701,703

Distribution · last window

Critical
5,666
High
22,249
Medium
20,641
Low
2,127

Filters

Window

Severity

Flags

Vulnerabilities412,521–412,560 · 412,870

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1167208.8 HIG

—

——0Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10h CVE-2026-1167187.5 HIG

—

——0Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10h CVE-2026-1167178.8 HIG

—

——0Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.10h CVE-2026-1167147.8 HIG

—

——0Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.10h CVE-2026-1167108.1 HIG

—

——0Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.10h CVE-2025-59813—

—

——0Rejected reason: Not used24d CVE-2026-1167077.0 HIG

—

——0Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.10h CVE-2026-1167067.5 HIG

—

——0Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.10h CVE-2026-125123—

—

——0compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint's argument parser writes rejected repository paths to stderr without the output sanitizer when a path is passed without a preceding -- separator. A pull request can supply a path containing workflow-command syntax; a carriage return can position that command at the start of a new line recognized by the GitHub Actions runner, allowing the package, Docker image, or a pre-commit hook with misconfigured args to issue the command in the job log. The default pre-commit configuration includes -- and is not affected, the GitHub Action is not affected, and the lint pass or fail result is unchanged. This issue is fixed in version 0.32.0.9h CVE-2017-4138—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none24d CVE-2026-1252717.8 HIG

—

——0Incorrect normalization of operation names in the custom security policy enforcement in awslabs aws-api-mcp-server before 1.5.1 might allow an actor to execute AWS API operations across AWS services that the operator's security policy was configured to deny or require elicitation for, via calls to operations whose names contain consecutive capital letters. To remediate this issue, users should upgrade to version 1.5.1.13h CVE-2026-1141707.8 HIG

—

——0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.10h CVE-2026-1141665.5 MED

—

——0Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.10h CVE-2026-1141657.8 HIG

—

——0Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.10h CVE-2026-1141648.8 HIG

—

——0Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.10h CVE-2019-18769—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none24d CVE-2026-1260427.0 HIG

—

——0VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as ${bufferName} and ${selectedText} are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shell metacharacters such as $(...), backticks, ; or |, executing commands as the victim when they run a task referencing these variables.9h CVE-2026-1141629.1 CRI

—

——0Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.10h CVE-2026-1141617.8 HIG

—

——0Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.10h CVE-2026-20880—

—

——0Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.8h CVE-2024-23416—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2024-23415—

—

——0Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.2d CVE-2026-21407—

—

——0Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.8h CVE-2025-58906—

—

——0Rejected reason: Not used24d CVE-2025-48845—

—

——0Rejected reason: Not used24d CVE-2026-1138597.5 HIG

—

——0Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.10h CVE-2026-1138567.8 HIG

—

——0Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.10h CVE-2026-1138557.5 HIG

—

——0Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.10h CVE-2026-1138487.8 HIG

—

——0Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.10h CVE-2026-1138477.8 HIG

—

——0Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.10h CVE-2026-1138445.5 MED

—

——0Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.10h CVE-2026-1138437.8 HIG

—

——0Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.10h CVE-2026-1138176.6 MED

—

——0Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.9h CVE-2026-1138164.1 MED

—

——0Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.9h CVE-2026-1138154.7 MED

—

——0Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.9h CVE-2026-1138148.8 HIG

—

——0Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.9h CVE-2018-4802—

—

——0Rejected reason: This candidate is unused by its CNA.24d CVE-2026-11938—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.26d CVE-2017-9972—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none26d CVE-2026-28765—

—

——0Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.8h