PULSE
FEED
ransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilitiesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomsilentransomgroup reclama a K.r.a. ...s · Not Foundransomlamashtu reclama a Gräfliches Hofbrauhaus Freising · DE · Agriculture and Food Productionransomlamashtu reclama a VERGI Muenster · DE · Energy & Utilities
CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,806in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666

Distribution · last window

  • Critical
    3,475
  • High
    15,877
  • Medium
    15,015
  • Low
    1,480
Filters
Filters

Window

Severity

Flags

Vulnerabilities6,121–6,160 · 16,806
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-970108.8 HIG
53.4%
——16Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d
CVE-2026-970097.8 HIG
24.0%
——7Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.8d
CVE-2026-970088.8 HIG
53.4%
——16Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d
CVE-2026-970078.8 HIG
53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d
CVE-2026-970055.5 MED
31.2%
——9Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.7d
CVE-2026-970048.8 HIG
53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d
CVE-2026-970038.8 HIG
53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d
CVE-2026-970017.8 HIG
35.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7d
CVE-2026-969977.8 HIG
21.4%
——6Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.7d
CVE-2026-969967.8 HIG
24.0%
——7Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7d
CVE-2026-969957.8 HIG
21.4%
——6Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.7d
CVE-2026-969607.5 HIG
63.5%
——19Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.6d
CVE-2026-969597.5 HIG
54.4%
——16Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.6d
CVE-2026-969587.5 HIG
63.5%
——19Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.6d
CVE-2026-969578.8 HIG
38.0%
——11Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.6d
CVE-2026-969537.8 HIG
14.2%
——4Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.6d
CVE-2026-969528.8 HIG
55.4%
——17Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6d
CVE-2026-969518.8 HIG
74.2%
KEV—72Microsoft Windows Command Injection Vulnerability6d
CVE-2026-969507.8 HIG
22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969497.0 HIG
8.0%
——2Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969485.5 MED
38.7%
——12Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.6d
CVE-2026-969477.8 HIG
22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969467.8 HIG
22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969457.5 HIG
56.6%
——17Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.6d
CVE-2026-969445.5 MED
38.7%
——12Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.6d
CVE-2026-969438.8 HIG
47.4%
——14Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.6d
CVE-2026-969397.0 HIG
9.4%
——3Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969386.7 MED
24.2%
——7Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969377.0 HIG
9.2%
——3Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969355.5 MED
27.7%
——8Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.6d
CVE-2026-969349.8 CRI
53.0%
——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.6d
CVE-2026-969337.8 HIG
22.6%
——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969327.0 HIG
8.0%
——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969317.8 HIG
22.6%
——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969305.5 MED
31.5%
——9Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6d
CVE-2026-969297.8 HIG
28.6%
——9Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969287.8 HIG
22.6%
——7Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.6d
CVE-2026-969275.5 MED
21.3%
——6Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.6d
CVE-2026-969265.5 MED
19.5%
——6Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.6d
CVE-2026-969255.5 MED
31.5%
——9Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.6d