CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,531in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,401
High
15,534
Medium
14,799
Low
1,422

Filters

Window

Severity

Flags

Vulnerabilities6,921–6,960 · 16,531

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-702986.5 MED

65.1%

——20Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.8d CVE-2026-702978.8 HIG

63.2%

——19Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.9d CVE-2026-702955.5 MED

34.5%

——10Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702945.5 MED

34.5%

——10Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702935.5 MED

34.5%

——10Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702925.5 MED

34.5%

——10Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702919.8 CRI

62.7%

——19Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7d CVE-2026-702885.5 MED

23.4%

——7Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702878.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-702867.8 HIG

29.6%

——9Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.6d CVE-2026-702857.8 HIG

26.3%

——8Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.1d CVE-2026-702845.5 MED

34.5%

——10Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.1d CVE-2026-702828.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7d CVE-2026-702817.5 HIG

62.1%

——19Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.7d CVE-2026-702804.4 MED

30.6%

——9Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.6d CVE-2026-702799.3 CRI

58.0%

——17Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.9d CVE-2026-702787.8 HIG

18.1%

——5Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.6d CVE-2026-702775.5 MED

45.4%

——14Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.6d CVE-2026-702767.0 HIG

16.0%

——5Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.7d CVE-2026-702758.8 HIG

57.3%

——17Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.6d CVE-2026-702747.8 HIG

23.5%

——7Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.9d CVE-2026-702737.0 HIG

19.0%

——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14h CVE-2026-702727.0 HIG

15.7%

——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.6d CVE-2026-702717.0 HIG

21.1%

——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14h CVE-2026-702705.5 MED

32.6%

——10Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.6d CVE-2026-702698.1 HIG

52.4%

——16Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-702688.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-702677.2 HIG

59.1%

——18Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8d CVE-2026-702668.8 HIG

60.8%

——18Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8d CVE-2026-702645.5 MED

36.1%

——11Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.9d CVE-2026-702636.5 MED

58.8%

——18Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.7d CVE-2026-702628.8 HIG

57.3%

——17Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.6d CVE-2026-702615.5 MED

41.2%

——12Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.6d CVE-2026-702605.5 MED

41.2%

56.4%

——17Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.8d CVE-2026-702588.8 HIG

57.3%

——17Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.6d CVE-2026-702578.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7d CVE-2026-702568.8 HIG

55.7%

——17Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7d CVE-2026-702557.8 HIG

27.9%

——8Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6d CVE-2026-702548.8 HIG

55.7%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d