CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,470in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,400
High
15,532
Medium
14,795
Low
1,422

Filters

Window

Severity

Flags

Vulnerabilities7,321–7,360 · 16,470

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1084608.1 HIG

52.1%

——16Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.7d CVE-2026-1084588.8 HIG

55.0%

——17Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.7d CVE-2026-1084578.1 HIG

52.1%

——16Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.7d CVE-2026-1084008.8 HIG

56.0%

——17Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.9d CVE-2026-1083997.2 HIG

26.6%

——8Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.7d CVE-2026-1083988.8 HIG

40.0%

——12Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.9d CVE-2026-1083967.0 HIG

8.5%

——3Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.7d CVE-2026-1081367.8 HIG

23.5%

——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7d CVE-2026-1081357.0 HIG

18.1%

——5Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.7d CVE-2026-1081347.0 HIG

15.7%

——5Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.9d CVE-2026-1081337.8 HIG

23.5%

——7Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.9d CVE-2026-1081327.0 HIG

15.7%

——5Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.7d CVE-2026-1081317.5 HIG

54.0%

——16No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.7d CVE-2026-1081307.8 HIG

25.0%

——7Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.9d CVE-2026-1081296.5 MED

60.9%

——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6d CVE-2026-1081286.5 MED

60.9%

——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6d CVE-2026-1081276.5 MED

60.9%

——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6d CVE-2026-1076076.2 MED

7.9%

——2SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.8d CVE-2026-1076066.2 MED

7.9%

——2SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.8d CVE-2026-1076056.2 MED

7.9%

——2SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.7d CVE-2026-1066257.8 HIG

10.1%

——3Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.9d CVE-2026-1057338.8 HIG

25.0%

——7Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.7d CVE-2026-1057327.3 HIG

33.8%

——10Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.9d CVE-2026-1057315.5 MED

30.8%

——9Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.9d CVE-2026-1057297.1 HIG

23.5%

——7Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.9d CVE-2026-1057287.5 HIG

58.5%

——18Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.9d CVE-2026-1057278.8 HIG

59.8%

——18Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.9d CVE-2026-1057265.5 MED

30.8%

——9Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.9d CVE-2026-1057257.0 HIG

15.7%

——5Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.9d CVE-2026-1057237.5 HIG

66.6%

——20Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.7d CVE-2026-1057227.0 HIG

15.7%

——5Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7d CVE-2026-1057204.3 MED

36.6%

——11Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8d CVE-2026-1057196.5 MED

61.2%

——18Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.8d CVE-2026-1057188.8 HIG

56.8%

——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-1057178.8 HIG

54.6%

——16Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8d CVE-2026-1057168.8 HIG

53.4%

——16Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8d CVE-2026-1057157.5 HIG

44.3%

——13Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d CVE-2026-1057147.5 HIG

44.3%

——13Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8d CVE-2026-1057135.7 MED

29.4%

——9Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.8d CVE-2026-1055997.5 HIG

44.3%

——13Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7d