CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,615in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,403
High
15,536
Medium
14,806
Low
1,423

Filters

Window

Severity

Flags

Vulnerabilities6,521–6,560 · 16,615

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-858117.5 HIG

27.5%

——8Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.6d CVE-2026-858107.0 HIG

14.9%

——4Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.6d CVE-2026-858099.8 CRI

59.5%

——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-858087.5 HIG

66.0%

——20Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.6d CVE-2026-858077.8 HIG

22.6%

——7Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-858069.8 CRI

59.5%

——18Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-858056.5 MED

47.6%

——14Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.6d CVE-2026-858047.8 HIG

25.7%

——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6d CVE-2026-858037.0 HIG

14.9%

——4Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.6d CVE-2026-858027.0 HIG

16.9%

——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6d CVE-2026-858007.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6d CVE-2026-857998.1 HIG

50.9%

——15Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-857987.2 HIG

58.3%

——17Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.6d CVE-2026-857976.5 MED

59.6%

——18Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.6d CVE-2026-857967.8 HIG

22.6%

——7Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-857957.8 HIG

22.6%

——7Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.6d CVE-2026-857945.5 MED

31.5%

——9Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.6d CVE-2026-857935.5 MED

38.7%

——12Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.6d CVE-2026-857929.8 CRI

58.5%

——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-857917.0 HIG

19.4%

——6Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-857905.9 MED

52.2%

——16Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.6d CVE-2026-857476.8 MED

10.5%

——3Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.4d CVE-2026-853777.8 HIG

22.6%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853767.8 HIG

19.1%

——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6d CVE-2026-853757.8 HIG

22.6%

——7Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.6d CVE-2026-853745.5 MED

31.5%

——9Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.6d CVE-2026-853737.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.6d CVE-2026-853727.0 HIG

14.9%

——4Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-853718.1 HIG

50.9%

——15Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.6d CVE-2026-853707.0 HIG

15.7%

——5Use after free in WebDAV allows an authorized attacker to elevate privileges locally.6d CVE-2026-853698.2 HIG

25.1%

——8Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d CVE-2026-853687.8 HIG

23.5%

——7Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6d CVE-2026-853677.0 HIG

15.7%

——5Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.6d CVE-2026-853667.8 HIG

23.5%

——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853657.0 HIG

9.2%

——3Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-853647.0 HIG

15.7%

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853638.8 HIG

54.0%

——16Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.9d CVE-2026-853627.0 HIG

15.7%

——5Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6d CVE-2026-853617.0 HIG

15.7%

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853597.8 HIG

54.2%

——16Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.6d