Vulnerabilities exploitable today
371,173in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,695
New KEV · 24H0
Exploit Today ≥ 701,637
Distribution · last window
- Critical2,229
- High8,582
- Medium6,298
- Low585
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-696419.1 CRI—
———Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.9hCVE-2026-696438.0 HIG—
———Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.9hCVE-2026-696457.0 HIG—
———Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.9hCVE-2026-696487.0 HIG—
———Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.9hCVE-2026-696498.8 HIG—
———Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.9hCVE-2026-696527.0 HIG—
———Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.9hCVE-2026-696547.0 HIG—
———Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.9hCVE-2026-688788.0 HIG—
———Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.9hCVE-2026-688777.8 HIG—
———Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.8hCVE-2026-696718.8 HIG—
———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8hCVE-2026-696725.5 MED—
———Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.8hCVE-2026-696745.5 MED—
———Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.9hCVE-2026-696768.8 HIG—
———Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.8hCVE-2026-696788.8 HIG—
———Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.9hCVE-2026-696795.7 MED—
———Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.7hCVE-2026-696808.1 HIG—
———Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.9hCVE-2026-696818.0 HIG—
———Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.9hCVE-2026-696827.0 HIG—
———Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.9hCVE-2026-696836.5 MED—
———Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.7hCVE-2026-696845.5 MED—
———Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.7hCVE-2026-696857.8 HIG—
———Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.9hCVE-2026-696868.8 HIG—
———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8hCVE-2026-696877.8 HIG—
———Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.9hCVE-2026-696887.1 HIG—
———Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.9hCVE-2026-696898.0 HIG—
———Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.9hCVE-2026-688768.0 HIG—
———Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.9hCVE-2026-688757.8 HIG—
———Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.9hCVE-2026-688745.7 MED—
———Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.7hCVE-2026-688735.5 MED—
———Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.7hCVE-2026-688515.5 MED—
———Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.7hCVE-2026-688507.8 HIG—
———Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.9hCVE-2026-688494.7 MED—
———Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.7hCVE-2026-696917.8 HIG—
———Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.9hCVE-2026-696927.0 HIG—
———Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.9hCVE-2026-696937.0 HIG—
———Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.9hCVE-2026-696947.0 HIG—
———Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.9hCVE-2026-697067.1 HIG—
———Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.9hCVE-2026-697077.8 HIG—
———Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.9hCVE-2026-697087.0 HIG—
———Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.9hCVE-2026-697097.8 HIG—
———Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.9h