CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,615in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,403
High
15,536
Medium
14,806
Low
1,423

Filters

Window

Severity

Flags

Vulnerabilities6,561–6,600 · 16,615

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-853587.8 HIG

23.5%

——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-853577.0 HIG

8.5%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.9d CVE-2026-853567.8 HIG

23.5%

——7Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853557.0 HIG

20.1%

——6Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853547.0 HIG

15.7%

——5Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6d CVE-2026-853537.5 HIG

62.6%

——19Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853527.0 HIG

15.7%

——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853437.8 HIG

27.7%

——8Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6d CVE-2026-853427.0 HIG

15.7%

——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853417.8 HIG

23.5%

——7Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-853407.8 HIG

23.8%

——7Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7d CVE-2026-853398.8 HIG

45.6%

——14Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine6d CVE-2026-853387.8 HIG

23.8%

——7Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-853376.5 MED

58.3%

——17Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853365.5 MED

31.5%

——9Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.6d CVE-2026-853347.5 HIG

61.9%

——19Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853336.7 MED

9.8%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.6d CVE-2026-853327.8 HIG

22.6%

——7Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-853316.5 MED

60.9%

——18Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.6d CVE-2026-853297.0 HIG

8.7%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.6d CVE-2026-853287.0 HIG

11.8%

——4Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-853277.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6d CVE-2026-853247.5 HIG

54.4%

——16Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.6d CVE-2026-853236.8 MED

40.5%

——12Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.6d CVE-2026-853227.5 HIG

63.3%

——19Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.6d CVE-2026-853217.5 HIG

64.1%

——19Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9d CVE-2026-853205.5 MED

22.1%

——7Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.6d CVE-2026-853197.5 HIG

65.4%

——20Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9d CVE-2026-853187.8 HIG

23.5%

——7Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-84994—

43.5%

——13Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37.8d CVE-2026-840207.0 HIG

14.9%

——4Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.3d CVE-2026-840197.0 HIG

9.2%

——3Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.3d CVE-2026-840187.0 HIG

8.0%

——2Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.3d CVE-2026-840177.5 HIG

66.0%

——20Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.3d CVE-2026-840167.8 HIG

22.6%

——7Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-840159.8 CRI

58.5%

——18Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.3d CVE-2026-840147.0 HIG

11.3%

——3Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-840137.8 HIG

22.6%

——7Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.3d CVE-2026-840128.1 HIG

50.9%

——15Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.3d CVE-2026-840115.5 MED

19.5%

——6Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.3d