Vulnerabilities exploitable today
16,781in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,465
- High15,846
- Medium15,004
- Low1,477
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-963257.5 HIG56.6%
——17Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.6dCVE-2026-963247.8 HIG22.6%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-963237.0 HIG14.9%
——4Use after free in Windows Update allows an authorized attacker to elevate privileges locally.6dCVE-2026-963227.0 HIG9.2%
——3Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.6dCVE-2026-963215.5 MED31.5%
——9Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.6dCVE-2026-963209.8 CRI59.5%
——18Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-963197.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963187.8 HIG22.6%
——7Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.6dCVE-2026-963177.8 HIG14.9%
——4Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-963165.5 MED19.5%
——6Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.6dCVE-2026-963155.5 MED19.5%
——6Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.6dCVE-2026-963145.5 MED31.5%
——9Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.6dCVE-2026-963137.0 HIG11.8%
——4Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.6dCVE-2026-963127.8 HIG22.6%
——7Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-963115.5 MED19.5%
——6Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.6dCVE-2026-963107.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963097.8 HIG22.6%
——7Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.6dCVE-2026-963087.8 HIG22.6%
——7Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963077.0 HIG9.2%
——3Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963067.8 HIG14.2%
——4Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-963057.0 HIG14.9%
——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963047.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963036.5 MED47.6%
——14Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.3dCVE-2026-963027.0 HIG14.9%
——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-963017.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-963005.9 MED56.7%
——17Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.3dCVE-2026-962547.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962537.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962529.1 CRI39.6%
——12Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.3dCVE-2026-962518.8 HIG43.6%
——13Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.3dCVE-2026-962507.0 HIG14.9%
——4Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-962497.8 HIG22.6%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-962487.5 HIG66.0%
——20Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.6dCVE-2026-962475.5 MED31.5%
——9Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.6dCVE-2026-962467.5 HIG61.9%
——19Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.3dCVE-2026-962457.5 HIG61.9%
——19Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.6dCVE-2026-962447.8 HIG22.6%
——7Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.6dCVE-2026-962437.8 HIG18.3%
——5Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.6dCVE-2026-962386.5 MED13.6%
——4Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.9dCVE-2026-962377.5 HIG45.0%
——14Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.9d