Vulnerabilities exploitable today
16,520in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-700498.0 HIG82.9%
——25Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.9dCVE-2026-700487.8 HIG26.3%
——8Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-700457.0 HIG17.2%
——5Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.6dCVE-2026-700445.5 MED43.2%
——13Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.6dCVE-2026-700415.5 MED33.5%
——10Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.6dCVE-2026-700388.1 HIG50.9%
——15Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.6dCVE-2026-700358.8 HIG69.5%
——21Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.9dCVE-2026-700337.5 HIG66.0%
——20Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.6dCVE-2026-700317.5 HIG66.0%
——20Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.6dCVE-2026-700277.8 HIG25.3%
——8Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.6dCVE-2026-700267.0 HIG17.2%
——5Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.6dCVE-2026-700255.3 MED60.9%
——18Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.6dCVE-2026-700249.8 CRI55.4%
——17Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.6dCVE-2026-700237.8 HIG25.3%
——8Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.6dCVE-2026-700217.0 HIG17.2%
——5Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.6dCVE-2026-700175.5 MED33.5%
——10Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.6dCVE-2026-700157.8 HIG25.4%
——8Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.6dCVE-2026-700147.5 HIG51.1%
——15Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.6dCVE-2026-700138.1 HIG43.5%
——13Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.4dCVE-2026-700127.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.3dCVE-2026-700115.5 MED34.5%
——10Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.6dCVE-2026-700107.8 HIG26.3%
——8Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-700087.8 HIG26.3%
——8Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.6dCVE-2026-700078.8 HIG49.9%
——15Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.9dCVE-2026-700067.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6dCVE-2026-700055.9 MED46.2%
——14Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.8dCVE-2026-700047.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699995.5 MED33.5%
——10Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.4dCVE-2026-699987.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699977.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699967.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699957.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699947.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699927.5 HIG45.6%
——14Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.4dCVE-2026-699917.5 HIG45.6%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4dCVE-2026-699887.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6dCVE-2026-699877.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6dCVE-2026-699867.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6dCVE-2026-699858.8 HIG51.1%
——15Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.6dCVE-2026-699847.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.6d