Vulnerabilities exploitable today
16,364in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,438
- High15,695
- Medium14,714
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-963177.8 HIG14.9%
——4Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-963165.5 MED19.5%
——6Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.6dCVE-2026-963155.5 MED19.5%
——6Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.6dCVE-2026-963145.5 MED31.5%
——9Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.6dCVE-2026-963137.0 HIG11.8%
——4Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.6dCVE-2026-963127.8 HIG22.6%
——7Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-963115.5 MED19.5%
——6Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.6dCVE-2026-963107.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963097.8 HIG22.6%
——7Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.6dCVE-2026-963087.8 HIG22.6%
——7Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963077.0 HIG9.2%
——3Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963067.8 HIG14.2%
——4Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-963057.0 HIG14.9%
——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963047.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963036.5 MED47.6%
——14Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.2dCVE-2026-963027.0 HIG14.9%
——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963017.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963005.9 MED56.7%
——17Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.2dCVE-2026-962547.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962537.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962529.1 CRI39.6%
——12Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.2dCVE-2026-962518.8 HIG43.6%
——13Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.2dCVE-2026-962507.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962497.8 HIG22.6%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-962487.5 HIG66.0%
——20Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.6dCVE-2026-962475.5 MED31.5%
——9Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.6dCVE-2026-962467.5 HIG61.9%
——19Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.2dCVE-2026-962457.5 HIG61.9%
——19Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.6dCVE-2026-962447.8 HIG22.6%
——7Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.6dCVE-2026-962437.8 HIG18.3%
——5Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.6dCVE-2026-962386.5 MED13.6%
——4Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.9dCVE-2026-962377.5 HIG45.0%
——14Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.8dCVE-2026-962367.5 HIG64.1%
——19Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.9dCVE-2026-962358.8 HIG54.0%
——16Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.8dCVE-2026-962345.3 MED19.6%
——6Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.9dCVE-2026-962337.5 HIG55.0%
——16Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.9dCVE-2026-962327.5 HIG52.3%
——16Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.9dCVE-2026-962317.8 HIG26.3%
——8Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.8dCVE-2026-962308.8 HIG55.3%
——17Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.9dCVE-2026-962296.5 MED56.6%
——17Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.9d