Vulnerabilities exploitable today
16,531in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-702537.0 HIG21.1%
——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-702527.0 HIG15.7%
——5Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-702517.5 HIG44.8%
——13Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8dCVE-2026-702508.8 HIG35.2%
——11Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.9dCVE-2026-702497.0 HIG21.1%
——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-702486.5 MED32.0%
——10Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.6dCVE-2026-702477.8 HIG22.1%
——7Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.6dCVE-2026-702468.8 HIG54.3%
——16Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8dCVE-2026-702457.8 HIG30.9%
——9Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.6dCVE-2026-702446.5 MED59.9%
——18Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.6dCVE-2026-702437.0 HIG18.1%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.14hCVE-2026-702429.8 CRI62.7%
——19Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7dCVE-2026-702417.0 HIG17.8%
——5Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.6dCVE-2026-702387.8 HIG23.5%
——7Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.6dCVE-2026-702377.0 HIG20.1%
——6Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.6dCVE-2026-702367.0 HIG19.0%
——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-702355.5 MED20.2%
——6Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.9dCVE-2026-702345.5 MED30.8%
——9Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.6dCVE-2026-702337.8 HIG29.6%
——9Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-702325.5 MED41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.14hCVE-2026-702307.0 HIG18.1%
——5Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-702298.1 HIG52.9%
——16Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.6dCVE-2026-702287.8 HIG24.6%
——7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6dCVE-2026-702275.5 MED34.5%
——10Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.9dCVE-2026-702257.8 HIG26.3%
——8Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.6dCVE-2026-702237.0 HIG19.0%
——6Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-702227.8 HIG30.6%
——9Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.6dCVE-2026-702207.8 HIG35.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7dCVE-2026-702196.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.9dCVE-2026-702187.8 HIG23.4%
——7Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.9dCVE-2026-702174.9 MED58.0%
——17Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.8dCVE-2026-702165.5 MED22.4%
——7Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.6dCVE-2026-702158.8 HIG55.4%
——17Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7dCVE-2026-702145.5 MED41.7%
——13Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.8dCVE-2026-702138.0 HIG23.4%
——7Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.6dCVE-2026-702127.0 HIG14.4%
——4Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.6dCVE-2026-702115.5 MED34.5%
——10Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.14hCVE-2026-702108.8 HIG57.3%
——17Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.6dCVE-2026-702097.0 HIG18.1%
——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-702085.5 MED32.8%
——10Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.6d