CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,341in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,437
High
15,688
Medium
14,711
Low
1,445

Filters

Window

Severity

Flags

Vulnerabilities5,921–5,960 · 16,341

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-858497.8 HIG

34.1%

——10Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-858487.8 HIG

29.6%

——9Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858476.5 MED

51.2%

——15Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.6d CVE-2026-858467.0 HIG

9.8%

——3Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.6d CVE-2026-858437.8 HIG

29.6%

——9Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858427.8 HIG

23.5%

——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.6d CVE-2026-858416.6 MED

50.2%

——15Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.9d CVE-2026-858406.5 MED

60.9%

——18Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.6d CVE-2026-858377.8 HIG

22.6%

——7Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-858367.8 HIG

22.6%

——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-858355.5 MED

32.6%

——10Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.9d CVE-2026-858347.0 HIG

15.7%

——5Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6d CVE-2026-858337.8 HIG

23.5%

——7Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858327.8 HIG

29.6%

——9Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858315.5 MED

32.6%

——10Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.6d CVE-2026-858305.5 MED

32.6%

——10Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.6d CVE-2026-858297.8 HIG

23.5%

——7Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-858287.0 HIG

15.7%

——5Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6d CVE-2026-858277.0 HIG

9.8%

——3Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6d CVE-2026-858267.0 HIG

14.9%

——4Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-858257.0 HIG

8.0%

——2Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858247.0 HIG

8.0%

——2Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-858237.0 HIG

14.9%

——4Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-858227.8 HIG

22.6%

——7Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-858216.5 MED

60.9%

——18Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6d CVE-2026-858207.8 HIG

22.6%

——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-858189.0 CRI

34.6%

——10Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.6d CVE-2026-858178.8 HIG

53.4%

——16Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.6d CVE-2026-858165.7 MED

43.2%

——13Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.6d CVE-2026-858155.5 MED

31.5%

——9Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.6d CVE-2026-858149.8 CRI

59.5%

——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6d CVE-2026-858125.5 MED

41.1%

——12Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.6d CVE-2026-858117.5 HIG

27.5%

——8Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.6d CVE-2026-858107.0 HIG

14.9%

——4Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.6d CVE-2026-858099.8 CRI

59.5%

——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-858087.5 HIG

66.0%

——20Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.6d CVE-2026-858077.8 HIG

22.6%

——7Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-858069.8 CRI

59.5%

——18Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-858056.5 MED

47.6%

——14Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.6d CVE-2026-858047.8 HIG

25.7%

——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6d