CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,327in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,436
High
15,682
Medium
14,709
Low
1,445

Filters

Window

Severity

Flags

Vulnerabilities6,001–6,040 · 16,327

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-853427.0 HIG

15.7%

——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853417.8 HIG

23.5%

——7Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853407.8 HIG

23.8%

——7Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7d CVE-2026-853398.8 HIG

45.6%

——14Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-853387.8 HIG

23.8%

——7Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.5d CVE-2026-853376.5 MED

58.3%

——17Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853365.5 MED

31.5%

——9Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.6d CVE-2026-853347.5 HIG

61.9%

——19Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853336.7 MED

9.8%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.6d CVE-2026-853327.8 HIG

22.6%

——7Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853316.5 MED

60.9%

——18Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.6d CVE-2026-853297.0 HIG

8.7%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.6d CVE-2026-853287.0 HIG

11.8%

——4Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-853277.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6d CVE-2026-853247.5 HIG

54.4%

——16Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.6d CVE-2026-853236.8 MED

40.5%

——12Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.6d CVE-2026-853227.5 HIG

63.3%

——19Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853217.5 HIG

64.1%

——19Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9d CVE-2026-853205.5 MED

22.1%

——7Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.6d CVE-2026-853197.5 HIG

65.4%

——20Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9d CVE-2026-853187.8 HIG

23.5%

——7Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-84994—

43.5%

——13Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37.8d CVE-2026-840207.0 HIG

14.9%

——4Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.3d CVE-2026-840197.0 HIG

9.2%

——3Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.3d CVE-2026-840187.0 HIG

8.0%

——2Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.3d CVE-2026-840177.5 HIG

66.0%

——20Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.3d CVE-2026-840167.8 HIG

22.6%

——7Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-840159.8 CRI

58.5%

——18Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.3d CVE-2026-840147.0 HIG

11.3%

——3Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-840137.8 HIG

22.6%

——7Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.3d CVE-2026-840128.1 HIG

50.9%

——15Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.3d CVE-2026-840115.5 MED

19.5%

——6Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.3d CVE-2026-840094.7 MED

8.9%

——3Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.3d CVE-2026-840087.5 HIG

55.0%

——16Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.9d CVE-2026-840076.5 MED

62.3%

——19Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.3d CVE-2026-839359.8 CRI

51.8%

——16Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.3d CVE-2026-839348.8 HIG

55.4%

——17Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.3d CVE-2026-839335.5 MED

35.8%

——11Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.6d CVE-2026-839327.8 HIG

26.3%

——8Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.6d CVE-2026-839317.8 HIG

18.1%

——5Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.9d