CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,806in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,475
High
15,877
Medium
15,015
Low
1,480

Filters

Window

Severity

Flags

Vulnerabilities6,161–6,200 · 16,806

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969249.8 CRI

58.5%

——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.6d CVE-2026-969237.0 HIG

14.9%

——4Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969215.5 MED

31.5%

——9Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.6d CVE-2026-969207.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969197.0 HIG

4.1%

——1Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969187.8 HIG

19.1%

——6Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-969178.8 HIG

22.6%

——7Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-969167.8 HIG

22.6%

——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-969157.8 HIG

14.2%

——4Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.6d CVE-2026-969148.8 HIG

17.4%

——5Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.6d CVE-2026-969138.8 HIG

25.0%

——7Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-969127.8 HIG

23.5%

——7Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-969117.8 HIG

33.3%

——10Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-969105.5 MED

32.6%

——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.6d CVE-2026-969099.8 CRI

58.5%

——18Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.6d CVE-2026-968687.0 HIG

15.7%

——5Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.9d CVE-2026-968677.8 HIG

23.5%

——7Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.6d CVE-2026-968667.5 HIG

66.6%

——20Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.9d CVE-2026-968655.6 MED

28.7%

——9Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.6d CVE-2026-968649.8 CRI

50.4%

——15Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.9d CVE-2026-968636.8 MED

22.7%

——7Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.9d CVE-2026-968627.8 HIG

23.5%

——7Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.6d CVE-2026-968617.5 HIG

66.6%

——20Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.9d CVE-2026-968605.5 MED

32.6%

——10Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.6d CVE-2026-968595.5 MED

32.6%

——10Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.6d CVE-2026-968585.5 MED

27.6%

——8Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.6d CVE-2026-968575.5 MED

30.8%

——9Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.3d CVE-2026-968567.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.3d CVE-2026-968555.5 MED

19.5%

——6Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.3d CVE-2026-968545.5 MED

21.3%

——6Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.3d CVE-2026-968534.7 MED

7.7%

——2Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.3d CVE-2026-968527.0 HIG

14.9%

——4Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6d CVE-2026-968515.5 MED

31.5%

——9Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.6d CVE-2026-968505.5 MED

31.5%

——9Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.6d CVE-2026-968495.5 MED

31.5%

——9Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.6d CVE-2026-968485.5 MED

31.5%

——9Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-968477.8 HIG

22.6%

——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.6d CVE-2026-968465.5 MED

21.3%

——6Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.6d CVE-2026-968448.0 HIG

39.6%

——12Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.6d CVE-2026-968437.8 HIG

22.6%

——7Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6d