Vulnerabilities exploitable today
16,806in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,475
- High15,877
- Medium15,015
- Low1,480
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-970108.8 HIG53.4%
——16Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-970097.8 HIG24.0%
——7Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.8dCVE-2026-970088.8 HIG53.4%
——16Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-970078.8 HIG53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-970055.5 MED31.2%
——9Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.7dCVE-2026-970048.8 HIG53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-970038.8 HIG53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-970017.8 HIG35.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7dCVE-2026-969977.8 HIG21.4%
——6Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.7dCVE-2026-969967.8 HIG24.0%
——7Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7dCVE-2026-969957.8 HIG21.4%
——6Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.7dCVE-2026-969607.5 HIG63.5%
——19Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.6dCVE-2026-969597.5 HIG54.4%
——16Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.6dCVE-2026-969587.5 HIG63.5%
——19Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.6dCVE-2026-969578.8 HIG38.0%
——11Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.6dCVE-2026-969537.8 HIG14.2%
——4Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.6dCVE-2026-969528.8 HIG55.4%
——17Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6dCVE-2026-969518.8 HIG74.2%
KEV—72Microsoft Windows Command Injection Vulnerability6dCVE-2026-969507.8 HIG22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-969497.0 HIG8.0%
——2Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-969485.5 MED38.7%
——12Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.6dCVE-2026-969477.8 HIG22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-969467.8 HIG22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-969457.5 HIG56.6%
——17Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.6dCVE-2026-969445.5 MED38.7%
——12Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.6dCVE-2026-969438.8 HIG47.4%
——14Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.6dCVE-2026-969397.0 HIG9.4%
——3Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6dCVE-2026-969386.7 MED24.2%
——7Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-969377.0 HIG9.2%
——3Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-969355.5 MED27.7%
——8Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.6dCVE-2026-969349.8 CRI53.0%
——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-969337.8 HIG22.6%
——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-969327.0 HIG8.0%
——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-969317.8 HIG22.6%
——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-969305.5 MED31.5%
——9Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6dCVE-2026-969297.8 HIG28.6%
——9Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-969287.8 HIG22.6%
——7Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-969275.5 MED21.3%
——6Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.6dCVE-2026-969265.5 MED19.5%
——6Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.6dCVE-2026-969255.5 MED31.5%
——9Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.6d