Vulnerabilities exploitable today
16,371in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,438
- High15,696
- Medium14,714
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969157.8 HIG14.1%
——4Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.6dCVE-2026-969148.8 HIG17.3%
——5Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.6dCVE-2026-969138.8 HIG24.8%
——7Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-969127.8 HIG23.3%
——7Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-969117.8 HIG33.1%
——10Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-969105.5 MED32.4%
——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.6dCVE-2026-969099.8 CRI58.3%
——17Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.6dCVE-2026-968687.0 HIG15.6%
——5Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-968677.8 HIG23.3%
——7Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.6dCVE-2026-968667.5 HIG66.4%
——20Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.9dCVE-2026-968655.6 MED28.5%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.6dCVE-2026-968649.8 CRI50.1%
——15Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.8dCVE-2026-968636.8 MED22.6%
——7Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.9dCVE-2026-968627.8 HIG23.3%
——7Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.6dCVE-2026-968617.5 HIG66.4%
——20Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.9dCVE-2026-968605.5 MED32.4%
——10Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.6dCVE-2026-968595.5 MED32.4%
——10Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.6dCVE-2026-968585.5 MED27.4%
——8Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.6dCVE-2026-968575.5 MED30.6%
——9Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.2dCVE-2026-968567.8 HIG22.5%
——7Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.2dCVE-2026-968555.5 MED19.4%
——6Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.2dCVE-2026-968545.5 MED21.2%
——6Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.2dCVE-2026-968534.7 MED7.6%
——2Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.2dCVE-2026-968527.0 HIG14.8%
——4Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6dCVE-2026-968515.5 MED31.3%
——9Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.6dCVE-2026-968505.5 MED31.3%
——9Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.6dCVE-2026-968495.5 MED31.3%
——9Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.6dCVE-2026-968485.5 MED31.3%
——9Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6dCVE-2026-968477.8 HIG22.5%
——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-968465.5 MED21.2%
——6Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.6dCVE-2026-968448.0 HIG39.3%
——12Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.6dCVE-2026-968437.8 HIG22.5%
——7Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-963257.5 HIG56.4%
——17Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.6dCVE-2026-963247.8 HIG22.5%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-963237.0 HIG14.8%
——4Use after free in Windows Update allows an authorized attacker to elevate privileges locally.6dCVE-2026-963227.0 HIG9.1%
——3Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.6dCVE-2026-963215.5 MED31.3%
——9Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.6dCVE-2026-963209.8 CRI59.3%
——18Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-963197.0 HIG14.8%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963187.8 HIG22.5%
——7Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.6d