Vulnerabilities exploitable today
16,723in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,458
- High15,817
- Medium14,989
- Low1,475
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-881726.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8dCVE-2026-881718.1 HIG51.5%
——15Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.3dCVE-2026-881696.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.7dCVE-2026-881687.8 HIG22.6%
——7Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.3dCVE-2026-881676.5 MED57.2%
——17Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.7dCVE-2026-881668.8 HIG56.7%
——17Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8dCVE-2026-881658.8 HIG57.8%
——17Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.3dCVE-2026-881638.8 HIG56.7%
——17Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8dCVE-2026-881625.5 MED19.5%
——6Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.3dCVE-2026-881617.0 HIG14.9%
——4Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.3dCVE-2026-881607.0 HIG4.1%
——1Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.3dCVE-2026-881598.8 HIG63.1%
——19Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.6dCVE-2026-881585.5 MED20.8%
——6Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.6dCVE-2026-881578.8 HIG44.3%
——13Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.6dCVE-2026-881569.8 CRI61.7%
——19Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7dCVE-2026-881558.8 HIG56.7%
——17Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8dCVE-2026-881546.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.7dCVE-2026-881536.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8dCVE-2026-881527.8 HIG28.0%
——8Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-881516.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8dCVE-2026-881508.8 HIG53.4%
——16Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7dCVE-2026-881497.0 HIG9.8%
——3Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.6dCVE-2026-881477.8 HIG26.6%
——8Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.6dCVE-2026-881467.0 HIG8.5%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-881458.8 HIG53.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7dCVE-2026-881448.8 HIG55.4%
——17Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7dCVE-2026-881436.7 MED16.3%
——5Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.6dCVE-2026-881428.8 HIG57.7%
——17Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.6dCVE-2026-881417.0 HIG15.7%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-881405.5 MED32.6%
——10Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.6dCVE-2026-881397.0 HIG9.8%
——3Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-881376.5 MED60.9%
——18Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.6dCVE-2026-881368.8 HIG60.9%
——18Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.6dCVE-2026-881357.8 HIG19.8%
——6Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-881347.8 HIG23.5%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-881337.8 HIG34.1%
——10Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-881325.9 MED23.6%
——7Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.6dCVE-2026-881306.5 MED65.1%
——20Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.6dCVE-2026-881296.5 MED65.1%
——20Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.6dCVE-2026-881287.8 HIG23.5%
——7Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6d