Vulnerabilities exploitable today
16,520in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-701067.8 HIG30.9%
——9Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-701047.8 HIG30.9%
——9Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-701037.8 HIG28.0%
——8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.6dCVE-2026-701027.8 HIG26.3%
——8Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.6dCVE-2026-700975.6 MED9.5%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.9dCVE-2026-700969.8 CRI61.1%
——18Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.6dCVE-2026-700957.5 HIG46.4%
——14Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.6dCVE-2026-700937.8 HIG26.3%
——8Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.6dCVE-2026-700927.8 HIG35.9%
——11Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.6dCVE-2026-700905.5 MED34.5%
——10Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.6dCVE-2026-700898.8 HIG57.3%
——17Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.6dCVE-2026-700875.5 MED19.5%
——6Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.6dCVE-2026-700867.0 HIG15.7%
——5Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.6dCVE-2026-700855.5 MED19.5%
——6Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.6dCVE-2026-700845.5 MED37.7%
——11Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.6dCVE-2026-700835.5 MED19.5%
——6Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.6dCVE-2026-700827.5 HIG67.2%
——20Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.6dCVE-2026-700797.5 HIG66.0%
——20Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.6dCVE-2026-700774.7 MED23.5%
——7Use after free in Windows Kernel allows an authorized attacker to disclose information locally.6dCVE-2026-700767.0 HIG21.1%
——6Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.9dCVE-2026-700754.4 MED19.0%
——6Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.6dCVE-2026-700745.5 MED33.5%
——10Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.6dCVE-2026-700726.5 MED65.0%
——20Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.6dCVE-2026-700715.5 MED12.5%
——4Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.6dCVE-2026-700698.8 HIG59.6%
——18Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.9dCVE-2026-700688.8 HIG57.3%
——17Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.6dCVE-2026-700677.0 HIG18.1%
——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.9dCVE-2026-700667.0 HIG18.1%
——5Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.9dCVE-2026-700647.8 HIG26.3%
——8Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.6dCVE-2026-700634.7 MED23.5%
——7Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.6dCVE-2026-700628.1 HIG52.4%
——16Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.6dCVE-2026-700607.8 HIG30.9%
——9Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-700597.8 HIG26.3%
——8Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.6dCVE-2026-700587.5 HIG67.9%
——20Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9dCVE-2026-700575.5 MED20.2%
——6Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.6dCVE-2026-700567.0 HIG18.1%
——5Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-700555.5 MED41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.6dCVE-2026-700547.8 HIG34.3%
——10Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.6dCVE-2026-700527.8 HIG24.6%
——7Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.9dCVE-2026-700517.8 HIG26.3%
——8Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.6d