CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,537in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,401
High
15,534
Medium
14,799
Low
1,422

Filters

Window

Severity

Flags

Vulnerabilities6,881–6,920 · 16,537

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-835199.8 CRI

61.1%

——18Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.6d CVE-2026-835187.8 HIG

26.3%

——8Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.9d CVE-2026-835179.8 CRI

61.1%

——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6d CVE-2026-835167.5 HIG

67.9%

——20Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.9d CVE-2026-835156.5 MED

60.6%

——18Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.6d CVE-2026-835147.8 HIG

26.3%

——8Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-835137.8 HIG

26.3%

——8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.6d CVE-2026-835117.4 HIG

47.4%

——14Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.9d CVE-2026-835107.0 HIG

10.9%

——3Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.6d CVE-2026-835097.0 HIG

20.9%

——6Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.6d CVE-2026-835087.8 HIG

26.3%

——8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-835075.5 MED

37.7%

——11Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.6d CVE-2026-835067.8 HIG

29.0%

——9Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.6d CVE-2026-835057.0 HIG

12.6%

——4Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.6d CVE-2026-835044.7 MED

14.7%

——4Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.9d CVE-2026-835006.1 MED

33.6%

——10Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.6d CVE-2026-834997.8 HIG

22.0%

——7Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-819717.0 HIG

10.9%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.6d CVE-2026-819697.8 HIG

22.0%

——7Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.9d CVE-2026-819645.5 MED

22.4%

——7Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.6d CVE-2026-784597.8 HIG

24.6%

——7Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.6d CVE-2026-779108.8 HIG

54.9%

——16Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.9d CVE-2026-779028.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-774968.8 HIG

57.3%

——17Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.6d CVE-2026-75120—

34.3%

——10The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment6d CVE-2026-730277.8 HIG

29.0%

——9External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.6d CVE-2026-729697.0 HIG

18.1%

——5Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9d CVE-2026-729687.0 HIG

18.1%

——5Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.6d CVE-2026-729557.0 HIG

19.0%

——6Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.9d CVE-2026-729347.0 HIG

18.1%

——5Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9d CVE-2026-713476.4 MED

11.4%

——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.6d CVE-2026-705808.8 HIG

22.0%

——7Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.6d CVE-2026-705718.1 HIG

60.1%

——18Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.9d CVE-2026-705667.8 HIG

26.3%

——8Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.6d CVE-2026-703438.8 HIG

56.3%

——17Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.9d CVE-2026-703037.8 HIG

30.9%

——9Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.1d CVE-2026-703028.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-703018.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-703009.8 CRI

61.7%

——19Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8d CVE-2026-702998.8 HIG

22.0%

——7Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.9d