Vulnerabilities exploitable today
16,545in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-836955.5 MED34.5%
——10Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.6dCVE-2026-836947.0 HIG15.7%
——5Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-836939.8 CRI62.3%
——19Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.6dCVE-2026-836927.8 HIG23.5%
——7Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-836917.8 HIG23.5%
——7Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.6dCVE-2026-836907.8 HIG26.3%
——8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-836897.0 HIG15.7%
——5Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6dCVE-2026-836888.8 HIG57.3%
——17Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6dCVE-2026-836877.0 HIG15.7%
——5Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.9dCVE-2026-836865.5 MED34.5%
——10Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.6dCVE-2026-836856.5 MED66.3%
——20Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.6dCVE-2026-836836.5 MED66.2%
——20Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.6dCVE-2026-836827.0 HIG15.7%
——5Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6dCVE-2026-836815.5 MED21.1%
——6Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.8dCVE-2026-836807.0 HIG9.8%
——3Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-836797.8 HIG23.5%
——7Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-836787.8 HIG23.5%
——7Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.6dCVE-2026-836777.5 HIG58.4%
——18Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.9dCVE-2026-836767.0 HIG15.7%
——5Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.6dCVE-2026-836757.0 HIG18.1%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-836748.1 HIG50.1%
——15Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.9dCVE-2026-836724.7 MED30.4%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.6dCVE-2026-836716.5 MED34.5%
——10Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.6dCVE-2026-836707.5 HIG61.3%
——18Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.6dCVE-2026-836697.8 HIG30.9%
——9Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6dCVE-2026-836685.5 MED23.6%
——7Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.6dCVE-2026-836676.5 MED65.0%
——19Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.6dCVE-2026-836667.0 HIG9.2%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.9dCVE-2026-836657.5 HIG67.9%
——20Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.9dCVE-2026-836645.5 MED23.6%
——7Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.6dCVE-2026-836597.8 HIG19.1%
——6Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-836585.5 MED18.9%
——6Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.6dCVE-2026-836575.5 MED12.0%
——4Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.9dCVE-2026-836564.7 MED13.5%
——4Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.6dCVE-2026-836557.5 HIG67.9%
——20Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.6dCVE-2026-836547.8 HIG19.8%
——6Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.6dCVE-2026-836527.8 HIG23.5%
——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-836516.5 MED60.6%
——18Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.6dCVE-2026-836507.8 HIG23.5%
——7Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.6dCVE-2026-836496.5 MED65.0%
——20Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.6d