CVE Watch401,106 in full archive

Vulnerabilities exploitable today

16,371in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,665

Distribution · last window

Critical
3,438
High
15,696
Medium
14,714
Low
1,445

Filters

Window

Severity

Flags

Vulnerabilities5,561–5,600 · 16,371

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969977.8 HIG

21.2%

——6Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.7d CVE-2026-969967.8 HIG

23.9%

——7Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7d CVE-2026-969957.8 HIG

21.2%

——6Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.7d CVE-2026-969607.5 HIG

63.3%

——19Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.6d CVE-2026-969597.5 HIG

54.2%

——16Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.6d CVE-2026-969587.5 HIG

63.3%

——19Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.6d CVE-2026-969578.8 HIG

37.7%

——11Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.6d CVE-2026-969537.8 HIG

14.1%

——4Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.6d CVE-2026-969528.8 HIG

55.2%

——17Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6d CVE-2026-969518.8 HIG

74.1%

KEV—72Microsoft Windows Command Injection Vulnerability6d CVE-2026-969507.8 HIG

22.5%

——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-969497.0 HIG

8.0%

——2Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-969485.5 MED

38.4%

——12Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.6d CVE-2026-969477.8 HIG

22.5%

——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-969467.8 HIG

22.5%

——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-969457.5 HIG

56.4%

——17Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.6d CVE-2026-969445.5 MED

38.4%

——12Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.6d CVE-2026-969438.8 HIG

47.2%

——14Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.6d CVE-2026-969397.0 HIG

9.3%

——3Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-969386.7 MED

24.1%

——7Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-969377.0 HIG

9.1%

——3Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-969355.5 MED

27.6%

——8Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.6d CVE-2026-969349.8 CRI

52.8%

——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.6d CVE-2026-969337.8 HIG

22.5%

——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969327.0 HIG

8.0%

——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969317.8 HIG

22.5%

——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-969305.5 MED

31.3%

——9Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6d CVE-2026-969297.8 HIG

28.4%

——9Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-969287.8 HIG

22.5%

——7Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-969275.5 MED

21.2%

——6Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.6d CVE-2026-969265.5 MED

19.4%

——6Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.6d CVE-2026-969255.5 MED

31.3%

——9Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.6d CVE-2026-969249.8 CRI

58.3%

——17Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.6d CVE-2026-969237.0 HIG

14.8%

——4Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969215.5 MED

31.3%

——9Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.6d CVE-2026-969207.8 HIG

22.5%

——7Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969197.0 HIG

4.0%

——1Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969187.8 HIG

19.0%

——6Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-969178.8 HIG

22.5%

——7Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-969167.8 HIG

22.5%

——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.6d