Vulnerabilities exploitable today
16,380in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,438
- High15,696
- Medium14,715
- Low1,446
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1038367.8 HIG3.6%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1038357.8 HIG3.6%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1038347.8 HIG3.6%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1038337.8 HIG3.6%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1038327.8 HIG3.6%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1038307.8 HIG7.7%
——2Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2dCVE-2026-1028558.8 HIG47.8%
——14Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.2dCVE-2026-1022389.6 CRI50.2%
——15Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.6dCVE-2026-1022358.8 HIG45.3%
——14Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.6dCVE-2026-1022347.4 HIG49.5%
——15Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.6dCVE-2026-978446.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978436.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978426.5 MED45.0%
——14Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978416.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978406.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978396.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978386.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978376.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978366.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978356.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978346.5 MED45.0%
——14Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978336.5 MED45.0%
——14Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978326.5 MED45.0%
——14Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978316.5 MED53.6%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978307.5 HIG58.1%
——17Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.8dCVE-2026-978296.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978286.5 MED54.8%
——16Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978276.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978266.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978256.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978246.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978236.5 MED54.8%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978226.5 MED53.7%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978216.5 MED53.7%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978206.5 MED53.7%
——16Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978196.5 MED60.7%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978176.5 MED60.7%
——18Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.6dCVE-2026-978169.8 CRI58.8%
——18Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.6dCVE-2026-978159.8 CRI51.2%
——15Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.6dCVE-2026-978149.8 CRI61.1%
——18Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.6d