Vulnerabilities exploitable today
16,537in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-836486.5 MED65.0%
——19Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.6dCVE-2026-836477.5 HIG66.5%
——20Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.6dCVE-2026-836464.8 MED29.5%
——9Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.6dCVE-2026-836457.5 HIG65.4%
——20Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9dCVE-2026-836447.0 HIG15.7%
——5Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-836438.8 HIG57.3%
——17Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.6dCVE-2026-836428.8 HIG56.7%
——17Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-836417.8 HIG23.5%
——7Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.6dCVE-2026-836407.8 HIG23.5%
——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.6dCVE-2026-836397.8 HIG23.5%
——7Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-836387.8 HIG23.5%
——7Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-836377.8 HIG26.3%
——8Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.6dCVE-2026-836366.5 MED32.0%
——10Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.6dCVE-2026-836357.5 HIG67.2%
——20Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.7dCVE-2026-836347.8 HIG23.5%
——7Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.9dCVE-2026-835887.8 HIG23.5%
——7Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-835877.8 HIG23.5%
——7Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.6dCVE-2026-835867.8 HIG19.8%
——6Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-835857.8 HIG23.5%
——7Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-835847.0 HIG15.7%
——5Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.6dCVE-2026-835837.8 HIG22.0%
——7Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.6dCVE-2026-835824.7 MED23.5%
——7Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.6dCVE-2026-835807.0 HIG20.1%
——6Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-835797.8 HIG26.3%
——8Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.6dCVE-2026-835789.8 CRI61.1%
——18Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.6dCVE-2026-835757.0 HIG18.1%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-835747.0 HIG18.1%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-835736.8 MED37.9%
——11Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.6dCVE-2026-835715.5 MED34.5%
——10Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.6dCVE-2026-835707.8 HIG26.3%
——8Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-835697.8 HIG24.6%
——7Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.6dCVE-2026-835687.8 HIG22.0%
——7Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.9dCVE-2026-835677.8 HIG26.3%
——8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-835667.0 HIG18.1%
——5Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.9dCVE-2026-835655.5 MED34.5%
——10Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.6dCVE-2026-835647.0 HIG18.1%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-835238.8 HIG57.3%
——17Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.9dCVE-2026-835228.1 HIG53.4%
——16Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.6dCVE-2026-835216.5 MED62.3%
——19Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.6dCVE-2026-835208.8 HIG69.5%
——21Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.9d