Vulnerabilities exploitable today
16,655in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,410
- High15,620
- Medium14,869
- Low1,427
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-858575.5 MED39.6%
——12Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.6dCVE-2026-858567.1 HIG28.9%
——9Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.6dCVE-2026-858557.0 HIG20.1%
——6Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.9dCVE-2026-858547.0 HIG15.7%
——5Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6dCVE-2026-858537.0 HIG15.7%
——5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6dCVE-2026-858525.5 MED32.6%
——10Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.6dCVE-2026-858517.8 HIG24.7%
——7Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.6dCVE-2026-858507.8 HIG26.6%
——8Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-858497.8 HIG34.1%
——10Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-858487.8 HIG29.6%
——9Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858476.5 MED51.2%
——15Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.6dCVE-2026-858467.0 HIG9.8%
——3Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.6dCVE-2026-858437.8 HIG29.6%
——9Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858427.8 HIG23.5%
——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.6dCVE-2026-858416.6 MED50.2%
——15Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.9dCVE-2026-858406.5 MED60.9%
——18Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.6dCVE-2026-858377.8 HIG22.6%
——7Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-858367.8 HIG22.6%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-858355.5 MED32.6%
——10Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.9dCVE-2026-858347.0 HIG15.7%
——5Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6dCVE-2026-858337.8 HIG23.5%
——7Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858327.8 HIG29.6%
——9Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858315.5 MED32.6%
——10Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.6dCVE-2026-858305.5 MED32.6%
——10Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.6dCVE-2026-858297.8 HIG23.5%
——7Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-858287.0 HIG15.7%
——5Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-858277.0 HIG9.8%
——3Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.6dCVE-2026-858267.0 HIG14.9%
——4Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-858257.0 HIG8.0%
——2Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858247.0 HIG8.0%
——2Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.6dCVE-2026-858237.0 HIG14.9%
——4Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.6dCVE-2026-858227.8 HIG22.6%
——7Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.6dCVE-2026-858216.5 MED60.9%
——18Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6dCVE-2026-858207.8 HIG22.6%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-858189.0 CRI34.6%
——10Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.6dCVE-2026-858178.8 HIG53.4%
——16Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.6dCVE-2026-858165.7 MED43.2%
——13Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.6dCVE-2026-858155.5 MED31.5%
——9Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.6dCVE-2026-858149.8 CRI59.5%
——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6dCVE-2026-858125.5 MED41.1%
——12Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.6d