PULSE
ES
FEED
ransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilitiesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilities
CVE Watch401,110 in full archive

Vulnerabilities exploitable today

16,288in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666

Distribution · last window

  • Critical
    3,435
  • High
    15,664
  • Medium
    14,704
  • Low
    1,444
Filters
Filters

Window

Severity

Flags

Vulnerabilities6,041–6,080 · 16,288
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-839307.0 HIG
11.7%
——4Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-839298.8 HIG
48.3%
——15Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.6dCVE-2026-839288.8 HIG
46.8%
——14Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.6dCVE-2026-839277.8 HIG
32.5%
——10Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.6dCVE-2026-839264.4 MED
32.6%
——10Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.6dCVE-2026-839254.7 MED
30.4%
——9Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.6dCVE-2026-839247.0 HIG
18.1%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-839238.8 HIG
59.9%
——18Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.6dCVE-2026-839227.8 HIG
26.3%
——8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-839217.0 HIG
19.0%
——6Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-839207.8 HIG
17.2%
——5Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-839197.8 HIG
15.9%
——5Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.6dCVE-2026-839187.8 HIG
17.2%
——5Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-839177.0 HIG
12.2%
——4Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.6dCVE-2026-839167.0 HIG
18.1%
——5Double free in Windows Error Reporting allows an authorized attacker to execute code locally.6dCVE-2026-839157.0 HIG
18.1%
——5Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-839148.1 HIG
53.4%
——16Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.6dCVE-2026-839137.8 HIG
26.3%
——8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-839127.8 HIG
17.2%
——5Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-839117.0 HIG
18.1%
——5Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.6dCVE-2026-839109.8 CRI
61.1%
——18Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.6dCVE-2026-839094.7 MED
30.4%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6dCVE-2026-839087.0 HIG
18.1%
——5Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.6dCVE-2026-839075.5 MED
41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.6dCVE-2026-839066.5 MED
59.0%
——18Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.9dCVE-2026-839054.7 MED
30.4%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.6dCVE-2026-839045.5 MED
30.8%
——9Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.6dCVE-2026-839037.8 HIG
26.3%
——8Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.9dCVE-2026-839027.8 HIG
28.0%
——8Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-839017.0 HIG
18.1%
——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-839007.0 HIG
18.1%
——5Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-838997.0 HIG
10.9%
——3Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-838985.5 MED
30.8%
——9Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.6dCVE-2026-838974.7 MED
28.7%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6dCVE-2026-838967.8 HIG
28.0%
——8Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-838956.8 MED
37.9%
——11Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.6dCVE-2026-838935.5 MED
41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.6dCVE-2026-838925.5 MED
32.5%
——10Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.6dCVE-2026-838918.8 HIG
54.6%
——16Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7dCVE-2026-838898.8 HIG
59.7%
——18Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.6d