CVE Watch370,813 in full archive

Vulnerabilities exploitable today

370,813in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,695

New KEV · 24H0

Exploit Today ≥ 701,637

Distribution · last window

Critical
2,187
High
8,406
Medium
6,046
Low
572

Filters

Window

Severity

Flags

Vulnerabilities370,641–370,680 · 370,813

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-657728.8 HIG

—

———Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.4h CVE-2026-656699.6 CRI

—

———Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.4h CVE-2026-649186.5 MED

—

———Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.4h CVE-2026-696498.8 HIG

—

———Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.4h CVE-2026-696527.0 HIG

—

———Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.4h CVE-2026-628958.8 HIG

—

———Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.4h CVE-2026-696547.0 HIG

—

———Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.4h CVE-2026-696699.8 CRI

—

———Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.4h CVE-2026-696718.8 HIG

—

———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.4h CVE-2026-696725.5 MED

—

———Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.4h CVE-2026-696745.5 MED

—

———Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.4h CVE-2026-696768.8 HIG

—

———Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.4h CVE-2026-696788.8 HIG

—

———Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.4h CVE-2026-628137.5 HIG

—

———Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.4h CVE-2026-628107.8 HIG

—

———Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.4h CVE-2026-628047.8 HIG

—

———External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.4h CVE-2026-628016.5 MED

—

———Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.4h CVE-2026-627626.5 MED

—

———Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.4h CVE-2026-627597.5 HIG

—

———Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.4h CVE-2026-627448.8 HIG

—

———Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.4h CVE-2026-627068.8 HIG

—

———Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.4h CVE-2026-626977.8 HIG

—

———Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.4h CVE-2026-696795.7 MED

—

———Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.4h CVE-2026-696808.1 HIG

—

———Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.4h CVE-2026-696818.0 HIG

—

———Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.4h CVE-2026-696827.0 HIG

—

———Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-696836.5 MED

—

———Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.4h CVE-2026-696845.5 MED

—

———Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.4h CVE-2026-696857.8 HIG

—

———Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.4h CVE-2026-696868.8 HIG

—

———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.4h CVE-2026-696877.8 HIG

—

———Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.4h CVE-2026-696887.1 HIG

—

———Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.4h CVE-2026-696898.0 HIG

—

———Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.4h CVE-2026-696904.6 MED

—

———Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.4h CVE-2026-696917.8 HIG

—

———Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.4h CVE-2026-696927.0 HIG

—

———Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-696937.0 HIG

—

———Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.4h CVE-2026-626947.0 HIG

—

———Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.4h CVE-2026-586496.5 MED

—

———Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.4h CVE-2026-696947.0 HIG

—

———Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.4h