CVE Watch358,897 in full archive

Vulnerabilities exploitable today

358,897in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,665

New KEV · 24H0

Exploit Today ≥ 701,607

Distribution · last window

Critical
2,703
High
11,649
Medium
7,415
Low
682

Filters

Window

Severity

Flags

Vulnerabilities357,521–357,560 · 358,897

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-37262—

—

——0Rejected reason: This CVE ID has been rejected.2d CVE-2021-47992—

—

——0Rejected reason: This CVE ID has been rejected.2d CVE-2021-47993—

—

——0Rejected reason: This CVE ID has been rejected.2d CVE-2026-627887.0 HIG

—

——0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.1d CVE-2026-628168.8 HIG

—

——0Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.15h CVE-2026-629138.8 HIG

—

——0Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.1d CVE-2026-668058.8 HIG

—

——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.1d CVE-2026-713629.1 CRI

—

——0Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.8h CVE-2026-72905—

—

——0Rejected reason: Further research determined the issue is not a vulnerability.2d CVE-2026-661479.4 CRI

—

——0An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.14h CVE-2026-675689.1 CRI

—

——0The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.15h CVE-2026-32791—

—

——0Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.8h CVE-2026-51281—

—

——0Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.13d CVE-2026-627958.8 HIG

—

——0Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.15h CVE-2026-628228.8 HIG

—

——0Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.15h CVE-2026-649007.3 HIG

—

——0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.12h CVE-2026-73081—

—

——0Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0.14h CVE-2026-68430—

—

——0In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash the kernel for this case. (cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891)1d CVE-2026-68443—

—

——0In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().1d CVE-2026-64848.2 HIG

—

——0In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.16h CVE-2026-649548.2 HIG

—

——0Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider. This allows a user who can run arbitrary VQL (usually with the "analyst" role) to launch new collections (usually requires the "investigator" role). This vulnerability is an escalation from an analyst to investigator role.1d CVE-2025-27076—

0.0%

——0——CVE-2026-502367.4 HIG

—

——0An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.2d CVE-2026-725338.8 HIG

—

——0An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before applying access controls, allowing crafted requests to be interpreted differently by the proxy and the authorization layer. Successful exploitation grants the attacker root-level access to the underlying Docker host.2d CVE-2026-725348.8 HIG

—

——0A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adopts any existing group by name and replaces its membership without validating the source scope against the target group. An attacker can grant their provisioning token full IdP superuser access and lock out all existing administrators.2d CVE-2026-725368.6 HIG

—

——0A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIntent GraphQL mutation. The mutation lacks authentication and authorization checks, exposing Stripe payment intent creation to unauthenticated callers. An attacker can create payment intents and alter billing for any tenant without credentials.2d CVE-2026-597007.8 HIG

—

——0A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.9h CVE-2026-72771—

—

——0n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.2d CVE-2020-37259—

—

——0Rejected reason: This CVE ID has been rejected.2d CVE-2026-181257.5 HIG

—

——0An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.2d CVE-2026-186386.5 MED

—

——0Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.1d CVE-2026-186407.1 HIG

—

——0The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files (such as ACL records, hunts etc). This can corrupt these files and cause data corruption.1d CVE-2026-73074—

—

——0Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.6h CVE-2025-48505—

—

——0Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.9h CVE-2026-613567.8 HIG

—

——0Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.1d CVE-2026-619297.0 HIG

—

——0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.15h CVE-2026-626967.8 HIG

—

——0Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.1d CVE-2026-627327.8 HIG

—

——0Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.15h CVE-2026-628875.5 MED

—

——0Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.1d CVE-2026-628887.8 HIG

—

——0Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.15h