Vulnerabilities exploitable today
16,519in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,400
- High15,532
- Medium14,795
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-699825.9 MED46.2%
——14Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.7dCVE-2026-699795.5 MED26.8%
——8Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.7dCVE-2026-699785.6 MED24.1%
——7Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.7dCVE-2026-699777.0 HIG18.1%
——5Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.7dCVE-2026-699767.5 HIG46.3%
——14Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.7dCVE-2026-699744.7 MED20.6%
——6Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.7dCVE-2026-699736.5 MED52.9%
——16Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.7dCVE-2026-699715.5 MED28.2%
——8Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.9dCVE-2026-699707.0 HIG14.5%
——4Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.7dCVE-2026-699694.7 MED25.0%
——7Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.7dCVE-2026-699686.5 MED55.2%
——17Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.7dCVE-2026-699675.5 MED34.5%
——10Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.7dCVE-2026-699667.8 HIG22.1%
——7Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.7dCVE-2026-699647.0 HIG14.5%
——4Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.7dCVE-2026-699637.8 HIG22.1%
——7Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.7dCVE-2026-699597.8 HIG25.4%
——8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.6dCVE-2026-699586.8 MED37.0%
——11Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.6dCVE-2026-699577.8 HIG25.4%
——8Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6dCVE-2026-699556.5 MED58.3%
——17Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.6dCVE-2026-699545.5 MED33.5%
——10Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.6dCVE-2026-699537.8 HIG25.4%
——8Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6dCVE-2026-699527.8 HIG25.4%
——8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6dCVE-2026-699507.8 HIG25.4%
——8Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.6dCVE-2026-699497.8 HIG25.4%
——8Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-699476.8 MED37.0%
——11Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.6dCVE-2026-699458.8 HIG19.1%
——6Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.6dCVE-2026-699438.8 HIG61.7%
——19Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.2dCVE-2026-699427.8 HIG25.3%
——8Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.6dCVE-2026-699406.5 MED59.9%
——18Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.6dCVE-2026-699357.0 HIG9.6%
——3Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.6dCVE-2026-699347.8 HIG25.4%
——8Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.6dCVE-2026-699317.0 HIG9.6%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.6dCVE-2026-699267.8 HIG28.6%
——9Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.6dCVE-2026-699237.8 HIG40.5%
——12Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.6dCVE-2026-699226.5 MED57.2%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.8dCVE-2026-699195.5 MED33.5%
——10Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.6dCVE-2026-699188.8 HIG27.2%
——8Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.6dCVE-2026-699167.8 HIG25.4%
——8Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-699157.0 HIG17.2%
——5Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.6dCVE-2026-699145.5 MED33.5%
——10Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.6d