CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,327in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,436
High
15,682
Medium
14,709
Low
1,445

Filters

Window

Severity

Flags

Vulnerabilities5,961–6,000 · 16,327

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-858037.0 HIG

14.9%

——4Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.6d CVE-2026-858027.0 HIG

16.9%

——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6d CVE-2026-858007.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6d CVE-2026-857998.1 HIG

50.9%

——15Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-857987.2 HIG

58.3%

——17Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.6d CVE-2026-857976.5 MED

59.6%

——18Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.6d CVE-2026-857967.8 HIG

22.6%

——7Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-857957.8 HIG

22.6%

——7Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.6d CVE-2026-857945.5 MED

31.5%

——9Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.6d CVE-2026-857935.5 MED

38.7%

——12Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.6d CVE-2026-857929.8 CRI

58.5%

——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-857917.0 HIG

19.4%

——6Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-857905.9 MED

52.2%

——16Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.6d CVE-2026-857476.8 MED

10.5%

——3Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.4d CVE-2026-853777.8 HIG

22.6%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853767.8 HIG

19.1%

——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6d CVE-2026-853757.8 HIG

22.6%

——7Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.6d CVE-2026-853745.5 MED

31.5%

——9Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.6d CVE-2026-853737.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.6d CVE-2026-853727.0 HIG

14.9%

——4Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-853718.1 HIG

50.9%

——15Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-853707.0 HIG

15.7%

——5Use after free in WebDAV allows an authorized attacker to elevate privileges locally.6d CVE-2026-853698.2 HIG

25.1%

——8Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d CVE-2026-853687.8 HIG

23.5%

——7Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6d CVE-2026-853677.0 HIG

15.7%

——5Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.6d CVE-2026-853667.8 HIG

23.5%

——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853657.0 HIG

9.2%

——3Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-853647.0 HIG

15.7%

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853638.8 HIG

54.0%

——16Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.8d CVE-2026-853627.0 HIG

15.7%

——5Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6d CVE-2026-853617.0 HIG

15.7%

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853597.8 HIG

54.2%

——16Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.6d CVE-2026-853587.8 HIG

23.5%

——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853577.0 HIG

8.5%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.9d CVE-2026-853567.8 HIG

23.5%

——7Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853557.0 HIG

20.1%

——6Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853547.0 HIG

15.7%

——5Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6d CVE-2026-853537.5 HIG

62.6%

——19Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853527.0 HIG

15.7%

——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853437.8 HIG

27.7%

——8Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d