PULSE
ES
FEED
ransomhelix reclama a Hypertherm · US · Manufacturingransomeverest reclama a PLD Group · Otherransomeverest reclama a Lindauer Dornier · DE · Manufacturingransomeverest reclama a Lanham Associates · Professional Servicesransompear reclama a Adobe Insurance Brokers, LLC · US · Financial Servicesransomhyflock reclama a gabonmeca.com leak incident · GA · Manufacturingransomhyflock reclama a dangvuongcac · VN · Not Foundransomn0n reclama a Company #103 · PT · Not Foundransomn0n reclama a Company #102 · Not Foundransomn0n reclama a Company #101 · Not Foundransomn0n reclama a Company #100 · Not Foundransomn0n reclama a Company #99 · Not Foundransomn0n reclama a TheHomeMag NorCal · US · Retail & E-Commerceransomclop reclama a LEGAL-RECORDS.US · US · Professional Servicesransomhelix reclama a Hypertherm · US · Manufacturingransomeverest reclama a PLD Group · Otherransomeverest reclama a Lindauer Dornier · DE · Manufacturingransomeverest reclama a Lanham Associates · Professional Servicesransompear reclama a Adobe Insurance Brokers, LLC · US · Financial Servicesransomhyflock reclama a gabonmeca.com leak incident · GA · Manufacturingransomhyflock reclama a dangvuongcac · VN · Not Foundransomn0n reclama a Company #103 · PT · Not Foundransomn0n reclama a Company #102 · Not Foundransomn0n reclama a Company #101 · Not Foundransomn0n reclama a Company #100 · Not Foundransomn0n reclama a Company #99 · Not Foundransomn0n reclama a TheHomeMag NorCal · US · Retail & E-Commerceransomclop reclama a LEGAL-RECORDS.US · US · Professional Services
CVE Watch401,106 in full archive

Vulnerabilities exploitable today

16,535in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665

Distribution · last window

  • Critical
    3,446
  • High
    15,743
  • Medium
    14,737
  • Low
    1,451
Filters
Filters

Window

Severity

Flags

Vulnerabilities3,841–3,880 · 16,535
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1109148.8 HIG
21.7%
——7Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1109138.8 HIG
24.1%
——7Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2024-583976.1 MED
2.2%
——1MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications like mp4chaps or leaking adjacent heap memory into chapter titles.5dCVE-2026-1113577.0 HIG
15.0%
——5Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.5dCVE-2026-1094687.5 HIG
50.0%
——15Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.5dCVE-2026-1084556.5 MED
41.8%
——13Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.2dCVE-2026-1084546.5 MED
41.8%
——13Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.2dCVE-2026-1084536.5 MED
42.6%
——13Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.2dCVE-2026-1084528.8 HIG
49.5%
——15Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.2dCVE-2026-1084518.8 HIG
36.2%
——11Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084508.8 HIG
36.2%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084498.8 HIG
36.2%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084487.5 HIG
26.1%
——8Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084478.8 HIG
36.2%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084468.8 HIG
36.2%
——11Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084458.8 HIG
36.2%
——11Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084448.8 HIG
36.2%
——11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084438.8 HIG
36.2%
——11Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2dCVE-2026-1084428.8 HIG
37.0%
——11Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084418.8 HIG
37.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084408.8 HIG
37.0%
——11Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084398.8 HIG
37.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084386.5 MED
42.6%
——13Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1084378.8 HIG
37.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084366.5 MED
42.6%
——13Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1084356.5 MED
42.6%
——13Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1084346.5 MED
42.6%
——13Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1084337.8 HIG
23.5%
——7Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.1dCVE-2026-1084328.8 HIG
37.9%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084318.8 HIG
37.9%
——11Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084308.8 HIG
37.9%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084298.8 HIG
37.9%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084288.8 HIG
37.9%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084278.8 HIG
38.9%
——12Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1084268.8 HIG
37.0%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.1dCVE-2026-1050408.8 HIG
26.9%
——8The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.5dCVE-2026-1050399.6 CRI
20.6%
——6EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.5dCVE-2026-1050389.8 CRI
50.1%
——15The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.5dCVE-2026-1050379.9 CRI
32.8%
——10EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.5dCVE-2026-1050367.5 HIG
13.6%
——4EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.5d