Vulnerabilities exploitable today
16,556in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,535
- Medium14,799
- Low1,423
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-837857.0 HIG20.1%
——6Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-837848.8 HIG60.9%
——18Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.6dCVE-2026-837837.8 HIG23.5%
——7Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6dCVE-2026-837829.8 CRI59.0%
——18Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.6dCVE-2026-837817.8 HIG23.5%
——7Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-837809.8 CRI61.1%
——18Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.9dCVE-2026-837797.8 HIG23.5%
——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-837788.8 HIG56.3%
——17Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.6dCVE-2026-837778.8 HIG45.0%
——13Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.6dCVE-2026-837766.8 MED37.9%
——11Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.6dCVE-2026-837757.0 HIG10.3%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-837744.7 MED30.4%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1dCVE-2026-837735.5 MED41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.9dCVE-2026-837718.8 HIG45.0%
——13Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.9dCVE-2026-837709.8 CRI62.3%
——19Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.6dCVE-2026-837697.8 HIG29.3%
——9Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.6dCVE-2026-837687.8 HIG28.0%
——8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.1dCVE-2026-837677.8 HIG14.9%
——4Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-837664.2 MED28.3%
——8Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.6dCVE-2026-837655.5 MED23.6%
——7Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.6dCVE-2026-837645.5 MED18.9%
——6Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.6dCVE-2026-837637.8 HIG28.0%
——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.6dCVE-2026-837627.8 HIG23.5%
——7Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.6dCVE-2026-837617.8 HIG30.9%
——9Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.1dCVE-2026-837605.5 MED22.2%
——7Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.6dCVE-2026-837598.8 HIG53.2%
——16Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.6dCVE-2026-837587.8 HIG23.5%
——7Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.6dCVE-2026-837577.8 HIG23.5%
——7Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.9dCVE-2026-837567.8 HIG17.2%
——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.1dCVE-2026-837555.5 MED34.5%
——10Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.6dCVE-2026-837547.5 HIG47.9%
——14Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.6dCVE-2026-837537.8 HIG23.5%
——7Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.6dCVE-2026-837527.0 HIG9.8%
——3Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-837517.0 HIG15.7%
——5Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.9dCVE-2026-837507.0 HIG10.0%
——3Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6dCVE-2026-837497.0 HIG9.8%
——3Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6dCVE-2026-837489.8 CRI53.4%
——16Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.6dCVE-2026-837475.5 MED34.5%
——10Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.6dCVE-2026-837468.1 HIG62.8%
——19Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.9dCVE-2026-837417.8 HIG14.5%
——4Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.6d