PULSE
EN
FEED
ransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technologyransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technologyransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Education
CVE Watch403,917 en archivo total

Vulnerabilidades explotables hoy

16,617en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691

Distribución · última ventana

  • Crítico
    5,616
  • Alto
    21,711
  • Medio
    20,116
  • Bajo
    2,110
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades8,961–9,000 · 16,617
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-837537.8 ALT
29.7%
——9Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.11dCVE-2026-837527.0 ALT
17.3%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837517.0 ALT
20.9%
——6Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.14dCVE-2026-837507.0 ALT
14.1%
——4Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.11dCVE-2026-837497.0 ALT
17.3%
——5Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.11dCVE-2026-837489.8 CRÍ
60.5%
——18Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.11dCVE-2026-837475.5 MED
40.4%
——12Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.11dCVE-2026-837468.1 ALT
66.6%
——20Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.14dCVE-2026-837417.8 ALT
19.7%
——6Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837407.0 ALT
20.9%
——6Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.11dCVE-2026-837397.5 ALT
41.2%
——12Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.11dCVE-2026-837387.0 ALT
22.3%
——7Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-837375.5 MED
40.4%
——12Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.11dCVE-2026-837365.5 MED
40.0%
——12Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-837357.8 ALT
37.4%
——11Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-837335.5 MED
40.4%
——12Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.11dCVE-2026-837327.8 ALT
33.0%
——10Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.11dCVE-2026-837288.8 ALT
23.6%
——7Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.11dCVE-2026-837277.8 ALT
29.7%
——9Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.11dCVE-2026-837267.8 ALT
29.7%
——9Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.11dCVE-2026-837258.8 ALT
55.8%
——17Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.11dCVE-2026-837247.0 ALT
20.7%
——6Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.11dCVE-2026-837235.5 MED
40.4%
——12Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.11dCVE-2026-837227.0 ALT
13.2%
——4Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.11dCVE-2026-837217.8 ALT
29.7%
——9Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.14dCVE-2026-837207.0 ALT
20.9%
——6Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.14dCVE-2026-837195.5 MED
34.4%
——10Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.11dCVE-2026-837187.0 ALT
20.9%
——6Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837177.0 ALT
23.0%
——7Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837168.8 ALT
29.7%
——9Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.11dCVE-2026-837157.1 ALT
25.6%
——8Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.11dCVE-2026-837145.5 MED
39.0%
——12Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.11dCVE-2026-837135.5 MED
61.1%
——18Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.11dCVE-2026-837127.8 ALT
29.7%
——9Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.11dCVE-2026-837107.0 ALT
20.9%
——6Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-837097.8 ALT
29.7%
——9Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.11dCVE-2026-837087.0 ALT
20.9%
——6Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837077.0 ALT
20.9%
——6Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.11dCVE-2026-837066.7 MED
31.5%
——9Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.14dCVE-2026-837055.5 MED
60.0%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.11d