CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,361in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,438
High
15,694
Medium
14,714
Low
1,445

Filters

Window

Severity

Flags

Vulnerabilities5,721–5,760 · 16,361

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-882084.6 MED

18.5%

——6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.8d CVE-2026-882077.5 HIG

38.5%

——12Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7d CVE-2026-882067.5 HIG

42.3%

——13Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8d CVE-2026-882047.3 HIG

49.2%

——15Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.8d CVE-2026-882036.5 MED

57.2%

——17Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.7d CVE-2026-882028.8 HIG

53.4%

——16Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-882016.5 MED

49.3%

——15Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8d CVE-2026-882008.8 HIG

52.5%

——16Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8d CVE-2026-881988.8 HIG

52.5%

——16Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8d CVE-2026-881978.8 HIG

43.6%

——13Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.7d CVE-2026-881968.8 HIG

53.4%

——16Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.7d CVE-2026-881956.5 MED

49.3%

——15Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8d CVE-2026-881947.8 HIG

22.6%

——7Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6d CVE-2026-881937.8 HIG

21.4%

——6Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.2d CVE-2026-881926.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881917.8 HIG

30.1%

——9Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-881906.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8d CVE-2026-881897.8 HIG

14.2%

——4Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6d CVE-2026-881887.8 HIG

22.6%

——7Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6d CVE-2026-881868.8 HIG

53.4%

——16Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-881858.1 HIG

51.5%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-881846.5 MED

49.3%

——15Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881836.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881827.8 HIG

22.6%

——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-881817.8 HIG

22.6%

——7Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.2d CVE-2026-881807.8 HIG

14.2%

——4Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.2d CVE-2026-881797.8 HIG

22.6%

——7Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.2d CVE-2026-881789.8 CRI

60.7%

——18Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7d CVE-2026-881777.8 HIG

14.2%

——4Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.2d CVE-2026-881756.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881748.1 HIG

34.4%

——10Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.2d CVE-2026-881738.1 HIG

42.2%

——13Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.2d CVE-2026-881726.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8d CVE-2026-881718.1 HIG

51.5%

——15Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.2d CVE-2026-881696.5 MED

57.2%

——17Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881687.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.2d CVE-2026-881676.5 MED

57.2%

——17Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.7d CVE-2026-881668.8 HIG

56.7%

——17Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8d CVE-2026-881658.8 HIG

57.8%

——17Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.2d CVE-2026-881638.8 HIG

56.7%

——17Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8d