CVE Watch401,106 in full archive

Vulnerabilities exploitable today

16,380in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,665

Distribution · last window

Critical
3,438
High
15,696
Medium
14,715
Low
1,446

Filters

Window

Severity

Flags

Vulnerabilities5,481–5,520 · 16,380

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-978136.5 MED

60.7%

——18Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.6d CVE-2026-978127.0 HIG

17.2%

——5Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-978117.8 HIG

13.0%

——4Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.6d CVE-2026-978107.0 HIG

17.2%

——5Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.6d CVE-2026-978097.8 HIG

16.3%

——5Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-978087.0 HIG

17.2%

——5Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-978077.8 HIG

16.3%

——5Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-978067.8 HIG

25.2%

——8Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-978059.8 CRI

60.2%

——18Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.6d CVE-2026-978047.8 HIG

23.6%

——7Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-978037.8 HIG

22.5%

——7Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-978017.5 HIG

48.2%

——14Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.8d CVE-2026-978007.8 HIG

14.3%

——4Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.6d CVE-2026-977997.8 HIG

20.9%

——6Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-977987.8 HIG

25.6%

——8Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6d CVE-2026-977947.8 HIG

22.5%

——7Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.6d CVE-2026-977937.0 HIG

13.7%

——4Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.6d CVE-2026-977927.8 HIG

21.2%

——6Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.6d CVE-2026-977905.5 MED

28.8%

——9Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.6d CVE-2026-977897.5 HIG

45.4%

——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6d CVE-2026-977887.5 HIG

51.5%

——15Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.6d CVE-2026-977877.0 HIG

9.6%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.6d CVE-2026-977838.1 HIG

41.4%

——12Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.8d CVE-2026-977826.8 MED

43.8%

——13Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.8d CVE-2026-977818.8 HIG

54.6%

——16Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.6d CVE-2026-977808.8 HIG

55.2%

——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977796.5 MED

57.0%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.6d CVE-2026-977788.8 HIG

47.2%

——14Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977778.8 HIG

53.2%

——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977768.8 HIG

55.2%

——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977758.8 HIG

53.2%

——16Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977747.0 HIG

7.3%

——2Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7d CVE-2026-977738.8 HIG

53.2%

——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977728.8 HIG

53.2%

——16Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977718.8 HIG

53.2%

——16Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977708.8 HIG

53.2%

——16Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977698.8 HIG

54.4%

——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977688.8 HIG

53.2%

——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977678.8 HIG

47.2%

——14Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d CVE-2026-977668.8 HIG

53.2%

——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6d