PULSEUnderground Intel

LIVE37signals / 24h

FEED

ransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilitiesransomn0n reclama a Heritage Senior Living · US · Healthcareransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilitiesransomn0n reclama a Heritage Senior Living · US · Healthcare

CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,350in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,437
High
15,692
Medium
14,714
Low
1,445

Filters

Filters

Window

Severity

Flags

Vulnerabilities5,801–5,840 · 16,350

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-881198.1 HIG

——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9d CVE-2026-881187.8 HIG

——9Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-881178.1 HIG

——14Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9d CVE-2026-881168.8 HIG

——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6d CVE-2026-881158.8 HIG

——14Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.5d CVE-2026-881148.8 HIG

——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6d CVE-2026-881137.0 HIG

——3Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-881128.8 HIG

——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6d CVE-2026-881107.0 HIG

——5Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.9d CVE-2026-881097.8 HIG

——6Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7d CVE-2026-881077.0 HIG

——1Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-881067.0 HIG

——3Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-881057.8 HIG

——4Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-881037.0 HIG

——3Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-881029.8 CRI

——15Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.6d CVE-2026-881017.8 HIG

——3Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.5d CVE-2026-881007.8 HIG

——7Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.6d CVE-2026-880995.9 MED

——17Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.6d CVE-2026-880987.0 HIG

——3Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.6d CVE-2026-880967.0 HIG

——1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.6d CVE-2026-880948.1 HIG

——15Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.6d CVE-2026-880937.8 HIG

——5Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6d CVE-2026-880929.4 CRI

——17Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.6d CVE-2026-880917.8 HIG

——26Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6d CVE-2026-880807.8 HIG

——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-880797.0 HIG

——4Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.6d CVE-2026-880767.0 HIG

——4Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-880758.8 HIG

——15Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.6d CVE-2026-880747.8 HIG

——7Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.6d CVE-2026-880738.8 HIG

——5Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-880727.8 HIG

——8Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-880717.8 HIG

——7Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d CVE-2026-880707.8 HIG

——7Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.6d CVE-2026-877167.5 HIG

——20Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.6d CVE-2026-877157.0 HIG

——3Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-877146.5 MED

——11Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.6d CVE-2026-877137.5 HIG

——6Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.6d CVE-2026-877127.8 HIG

——4Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.6d CVE-2026-877117.8 HIG

——4Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-877107.0 HIG

——1Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.6d