PULSEUnderground Intel

LIVE27signals / 24h

FEED

ransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Servicesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Servicesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerce

CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,545in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,401
High
15,534
Medium
14,799
Low
1,422

Filters

Filters

Window

Severity

Flags

Vulnerabilities6,761–6,800 · 16,545

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-837407.0 HIG

——5Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.6d CVE-2026-837397.5 HIG

——11Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.6d CVE-2026-837387.0 HIG

——4Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.6d CVE-2026-837375.5 MED

——10Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.6d CVE-2026-837365.5 MED

——10Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-837357.8 HIG

——9Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.9d CVE-2026-837335.5 MED

——10Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.6d CVE-2026-837327.8 HIG

——8Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.6d CVE-2026-837288.8 HIG

——4Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.6d CVE-2026-837277.8 HIG

——7Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6d CVE-2026-837267.8 HIG

——7Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.6d CVE-2026-837258.8 HIG

——15Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.6d CVE-2026-837247.0 HIG

——4Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.6d CVE-2026-837235.5 MED

——10Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.6d CVE-2026-837227.0 HIG

——3Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.6d CVE-2026-837217.8 HIG

——7Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.9d CVE-2026-837207.0 HIG

——5Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.9d CVE-2026-837195.5 MED

——7Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.6d CVE-2026-837187.0 HIG

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-837177.0 HIG

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-837168.8 HIG

——7Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.6d CVE-2026-837157.1 HIG

——6Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.6d CVE-2026-837145.5 MED

——10Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.6d CVE-2026-837135.5 MED

——12Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.6d CVE-2026-837127.8 HIG

——7Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.6d CVE-2026-837107.0 HIG

——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-837097.8 HIG

——7Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.6d CVE-2026-837087.0 HIG

——5Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-837077.0 HIG

——5Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.6d CVE-2026-837066.7 MED

——8Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.9d CVE-2026-837055.5 MED

——12Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.6d CVE-2026-837047.8 HIG

——11Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6d CVE-2026-837036.5 MED

——14Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.6d CVE-2026-837027.0 HIG

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-837017.0 HIG

——5Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.6d CVE-2026-837007.8 HIG

——7Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.6d CVE-2026-836997.8 HIG

——9Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-836987.8 HIG

——7Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-836974.7 MED

——3Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.6d CVE-2026-836967.0 HIG

——5Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.6d