Vulnerabilities exploitable today
371,173in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,695
New KEV · 24H0
Exploit Today ≥ 701,637
Distribution · last window
- Critical2,229
- High8,582
- Medium6,298
- Low586
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-697248.8 HIG—
———Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.7hCVE-2026-697235.7 MED—
———Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.4hCVE-2026-697228.8 HIG—
———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5hCVE-2026-697207.8 HIG—
———Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.7hCVE-2026-697196.5 MED—
———Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.5hCVE-2026-697178.0 HIG—
———Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.7hCVE-2026-697168.8 HIG—
———Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.7hCVE-2026-697159.8 CRI—
———Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.7hCVE-2026-697148.0 HIG—
———Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.7hCVE-2026-697134.4 MED—
———Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.7hCVE-2026-697128.8 HIG—
———Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.7hCVE-2026-697117.0 HIG—
———Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.7hCVE-2026-697097.8 HIG—
———Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.7hCVE-2026-697087.0 HIG—
———Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.7hCVE-2026-697077.8 HIG—
———Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.7hCVE-2026-697067.1 HIG—
———Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.7hCVE-2026-696947.0 HIG—
———Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.7hCVE-2026-696937.0 HIG—
———Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.7hCVE-2026-696927.0 HIG—
———Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.7hCVE-2026-696917.8 HIG—
———Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.7hCVE-2026-696898.0 HIG—
———Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.7hCVE-2026-696887.1 HIG—
———Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.7hCVE-2026-696877.8 HIG—
———Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.7hCVE-2026-696868.8 HIG—
———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5hCVE-2026-696857.8 HIG—
———Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.7hCVE-2026-696845.5 MED—
———Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.4hCVE-2026-696836.5 MED—
———Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.4hCVE-2026-696827.0 HIG—
———Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.7hCVE-2026-696818.0 HIG—
———Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.7hCVE-2026-696808.1 HIG—
———Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.7hCVE-2026-696795.7 MED—
———Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.4hCVE-2026-696788.8 HIG—
———Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.7hCVE-2026-696768.8 HIG—
———Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.5hCVE-2026-696745.5 MED—
———Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.7hCVE-2026-696725.5 MED—
———Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.5hCVE-2026-696718.8 HIG—
———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5hCVE-2026-696547.0 HIG—
———Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.7hCVE-2026-696527.0 HIG—
———Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.7hCVE-2026-696498.8 HIG—
———Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.7hCVE-2026-696487.0 HIG—
———Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.7h