PULSE
ES
FEED
ransomqilin reclama a SEPIVER · MX · Not Foundransomlockbit5 reclama a istanbultrading.com · TR · Retail & E-Commerceransomsilentransomgroup reclama a M... C... · Not Foundransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a SEPIVER · MX · Not Foundransomlockbit5 reclama a istanbultrading.com · TR · Retail & E-Commerceransomsilentransomgroup reclama a M... C... · Not Foundransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitality
CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,519in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666

Distribution · last window

  • Critical
    3,400
  • High
    15,532
  • Medium
    14,795
  • Low
    1,422
Filters
Filters

Window

Severity

Flags

Vulnerabilities7,201–7,240 · 16,519
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-699138.1 HIG
44.6%
——13Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.6dCVE-2026-699097.8 HIG
21.4%
——6Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.6dCVE-2026-699055.5 MED
21.7%
——7Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.6dCVE-2026-699026.7 MED
27.2%
——8Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.6dCVE-2026-698987.8 HIG
25.4%
——8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-698869.8 CRI
55.2%
——17Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.6dCVE-2026-698847.8 HIG
26.3%
——8Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.7dCVE-2026-698839.8 CRI
55.2%
——17Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.4dCVE-2026-698827.8 HIG
42.9%
——13Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.4dCVE-2026-698807.8 HIG
28.6%
——9Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.4dCVE-2026-698776.5 MED
33.3%
——10Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.9dCVE-2026-698677.8 HIG
26.3%
——8Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.7dCVE-2026-698567.0 HIG
10.3%
——3Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.7dCVE-2026-698507.8 HIG
26.3%
——8Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.7dCVE-2026-698407.0 HIG
11.7%
——4Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.7dCVE-2026-698308.1 HIG
27.3%
——8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.9dCVE-2026-698028.1 HIG
43.4%
——13Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.9dCVE-2026-697987.8 HIG
26.3%
——8Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.7dCVE-2026-697957.0 HIG
18.1%
——5Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.7dCVE-2026-697897.5 HIG
34.8%
——10Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.9dCVE-2026-697837.8 HIG
37.1%
——11External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.9dCVE-2026-697667.0 HIG
10.3%
——3Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.7dCVE-2026-697658.8 HIG
51.1%
——15Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.9dCVE-2026-697637.0 HIG
10.3%
——3Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.7dCVE-2026-697437.0 HIG
18.1%
——5Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-697367.0 HIG
10.3%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.7dCVE-2026-697337.8 HIG
37.1%
——11Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.9dCVE-2026-697215.5 MED
34.5%
——10Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.7dCVE-2026-697187.8 HIG
61.3%
——18Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.9dCVE-2026-697059.8 CRI
55.7%
——17Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.7dCVE-2026-696755.5 MED
34.5%
——10Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.9dCVE-2026-696737.8 HIG
38.6%
——12Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.9dCVE-2026-696517.5 HIG
65.4%
——20Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.9dCVE-2026-696507.8 HIG
12.7%
——4Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.9dCVE-2026-696445.5 MED
41.2%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.7dCVE-2026-696405.3 MED
49.3%
——15Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.9dCVE-2026-696399.8 CRI
55.7%
——17Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.7dCVE-2026-696356.6 MED
34.1%
——10Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.7dCVE-2026-696349.8 CRI
55.7%
——17Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.7dCVE-2026-696337.8 HIG
26.3%
——8Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.7d