Vulnerabilities exploitable today
16,723in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,441
- High15,753
- Medium14,970
- Low1,471
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-881277.0 HIG15.7%
——5Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.6dCVE-2026-881267.8 HIG23.5%
——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-881256.5 MED65.1%
——20Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.6dCVE-2026-881247.0 HIG15.7%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-881236.5 MED65.1%
——20Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.6dCVE-2026-881226.5 MED55.8%
——17Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.6dCVE-2026-881218.0 HIG41.0%
——12Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.6dCVE-2026-881208.1 HIG52.1%
——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9dCVE-2026-881198.1 HIG52.1%
——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9dCVE-2026-881187.8 HIG29.6%
——9Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-881178.1 HIG45.2%
——14Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9dCVE-2026-881168.8 HIG44.9%
——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-881158.8 HIG45.6%
——14Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.6dCVE-2026-881148.8 HIG44.9%
——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-881137.0 HIG9.8%
——3Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-881128.8 HIG44.9%
——13Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-881107.0 HIG15.7%
——5Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-881097.8 HIG21.4%
——6Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7dCVE-2026-881077.0 HIG4.4%
——1Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-881067.0 HIG9.8%
——3Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-881057.8 HIG14.2%
——4Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-881037.0 HIG9.2%
——3Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-881029.8 CRI49.7%
——15Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.6dCVE-2026-881017.8 HIG10.1%
——3Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.6dCVE-2026-881007.8 HIG22.6%
——7Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.6dCVE-2026-880995.9 MED56.7%
——17Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.6dCVE-2026-880987.0 HIG9.2%
——3Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.6dCVE-2026-880967.0 HIG4.1%
——1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.6dCVE-2026-880948.1 HIG49.7%
——15Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.6dCVE-2026-880937.8 HIG16.6%
——5Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6dCVE-2026-880929.4 CRI55.6%
——17Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.6dCVE-2026-880917.8 HIG87.0%
——26Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6dCVE-2026-880807.8 HIG14.2%
——4Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-880797.0 HIG14.9%
——4Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.6dCVE-2026-880767.0 HIG14.9%
——4Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-880758.8 HIG50.1%
——15Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.6dCVE-2026-880747.8 HIG24.1%
——7Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.6dCVE-2026-880738.8 HIG16.6%
——5Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-880727.8 HIG26.7%
——8Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-880717.8 HIG22.6%
——7Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d