CVE Watch401,677 in full archive

Vulnerabilities exploitable today

16,467in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,666

Distribution · last window

Critical
3,400
High
15,532
Medium
14,795
Low
1,422

Filters

Window

Severity

Flags

Vulnerabilities7,441–7,480 · 16,467

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1022109.8 CRI

58.5%

——18Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.3d CVE-2026-1022097.0 HIG

13.8%

——4Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022087.0 HIG

14.9%

——4Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022077.0 HIG

8.0%

——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022066.8 MED

33.9%

——10Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.3d CVE-2026-1022057.8 HIG

22.6%

——7Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022047.8 HIG

26.1%

——8Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022038.8 HIG

54.4%

——16Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.3d CVE-2026-1022027.8 HIG

26.7%

——8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.3d CVE-2026-1022017.8 HIG

22.6%

——7Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021996.5 MED

57.2%

——17Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.3d CVE-2026-1021985.3 MED

52.4%

——16Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.3d CVE-2026-1021977.0 HIG

14.9%

——4Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021967.8 HIG

22.6%

——7Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021957.0 HIG

14.9%

——4Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021947.0 HIG

14.9%

——4Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021937.0 HIG

14.9%

——4Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021927.5 HIG

66.0%

——20Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.3d CVE-2026-1021917.0 HIG

14.9%

——4Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021897.0 HIG

14.9%

——4Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.3d CVE-2026-1021886.8 MED

33.9%

——10Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.3d CVE-2026-1021875.5 MED

31.5%

——9Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.3d CVE-2026-1021864.7 MED

22.7%

——7Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.3d CVE-2026-1002257.0 HIG

14.9%

——4Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.3d CVE-2026-1002229.8 CRI

60.4%

——18Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.3d CVE-2026-1002208.8 HIG

56.8%

——17Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.3d CVE-2026-1002199.8 CRI

61.7%

——19Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.3d CVE-2026-1002188.1 HIG

52.8%

——16Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.3d CVE-2026-1002177.8 HIG

19.1%

——6Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.3d CVE-2026-1002167.0 HIG

14.9%

——4Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.3d CVE-2026-1002157.8 HIG

39.4%

——12Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.3d CVE-2026-1002148.8 HIG

78.7%

——24Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.9d CVE-2026-1002128.8 HIG

55.7%

——17Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-1002118.8 HIG

56.8%

——17Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-1002108.8 HIG

56.8%

——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-1002098.8 HIG

56.8%

——17Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.7d CVE-2026-1002077.3 HIG

34.8%

——10Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.7d CVE-2026-1002057.1 HIG

26.8%

——8Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.9d CVE-2026-1002037.0 HIG

17.3%

——5Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.3d CVE-2026-1002029.8 CRI

61.7%

——19Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.3d