Vulnerabilities exploitable today
16,528in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-701567.0 HIG17.8%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-701557.5 HIG67.2%
——20Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.6dCVE-2026-701539.8 CRI61.3%
——18Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.6dCVE-2026-701517.8 HIG28.0%
——8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-701507.0 HIG15.7%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-701498.8 HIG57.3%
——17Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.6dCVE-2026-701486.5 MED28.2%
——8Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.6dCVE-2026-701479.8 CRI61.3%
——18Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.6dCVE-2026-701447.0 HIG21.1%
——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-701437.8 HIG26.3%
——8Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.6dCVE-2026-701427.8 HIG29.0%
——9Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-701415.5 MED32.6%
——10Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.6dCVE-2026-701407.0 HIG18.1%
——5Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-701397.8 HIG26.3%
——8Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-701387.8 HIG26.3%
——8Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.6dCVE-2026-701375.5 MED28.2%
——8Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.6dCVE-2026-701367.0 HIG15.7%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-701355.5 MED34.5%
——10Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.6dCVE-2026-701347.0 HIG18.1%
——5Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.6dCVE-2026-701337.5 HIG66.6%
——20Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.6dCVE-2026-701327.8 HIG28.0%
——8Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.6dCVE-2026-701317.8 HIG37.6%
——11Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.6dCVE-2026-701285.5 MED30.8%
——9Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.6dCVE-2026-701278.1 HIG52.8%
——16Use after free in DNS Server allows an unauthorized attacker to execute code over a network.6dCVE-2026-701267.1 HIG39.6%
——12Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.6dCVE-2026-701237.8 HIG22.1%
——7Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-701226.5 MED17.4%
——5Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-701217.8 HIG26.3%
——8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.14hCVE-2026-701196.5 MED66.3%
——20Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.6dCVE-2026-701187.0 HIG18.1%
——5Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-701177.8 HIG28.0%
——8Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14hCVE-2026-701164.2 MED24.1%
——7Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.9dCVE-2026-701157.0 HIG15.7%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-701147.8 HIG26.3%
——8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.14hCVE-2026-701137.8 HIG26.3%
——8Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-701127.8 HIG26.3%
——8Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.6dCVE-2026-701118.1 HIG51.5%
——15Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.14hCVE-2026-701107.8 HIG35.9%
——11Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.6dCVE-2026-701097.8 HIG35.9%
——11Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.6dCVE-2026-701087.8 HIG30.9%
——9Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14h