CVE Watch403,917 en archivo total

Vulnerabilidades explotables hoy

16,634en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,758

Nuevos KEV · 24H0

Exploit Today ≥ 701,691

Distribución · última ventana

Crítico
5,616
Alto
21,711
Medio
20,117
Bajo
2,110

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades9,081–9,120 · 16,634

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-835687.8 ALT

27.9%

——8Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.14d CVE-2026-835677.8 ALT

32.6%

——10Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.11d CVE-2026-835667.0 ALT

23.3%

——7Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.14d CVE-2026-835655.5 MED

40.4%

——12Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.11d CVE-2026-835647.0 ALT

23.3%

——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11d CVE-2026-835238.8 ALT

60.9%

——18Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.14d CVE-2026-835228.1 ALT

56.9%

——17Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.11d CVE-2026-835216.5 MED

66.1%

——20Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.11d CVE-2026-835208.8 ALT

72.9%

——22Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.5d CVE-2026-835199.8 CRÍ

65.0%

——20Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.11d CVE-2026-835187.8 ALT

32.6%

——10Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.14d CVE-2026-835179.8 CRÍ

65.0%

——20Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.11d CVE-2026-835167.5 ALT

71.5%

——21Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.14d CVE-2026-835156.5 MED

64.5%

——19Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.11d CVE-2026-835147.8 ALT

32.6%

——10Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.11d CVE-2026-835137.8 ALT

32.6%

——10Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.11d CVE-2026-835117.4 ALT

51.6%

——15Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.14d CVE-2026-835107.0 ALT

15.1%

——5Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.11d CVE-2026-835097.0 ALT

26.7%

——8Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.11d CVE-2026-835087.8 ALT

32.6%

——10Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.11d CVE-2026-835075.5 MED

43.0%

——13Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.11d CVE-2026-835067.8 ALT

35.4%

——11Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.11d CVE-2026-835057.0 ALT

17.2%

——5Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.11d CVE-2026-835044.7 MED

20.0%

——6Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.14d CVE-2026-835006.1 MED

39.6%

——12Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.11d CVE-2026-834997.8 ALT

27.9%

——8Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.11d CVE-2026-819717.0 ALT

15.1%

——5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.11d CVE-2026-819697.8 ALT

27.9%

——8Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.14d CVE-2026-819645.5 MED

28.5%

——9Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.11d CVE-2026-784597.8 ALT

31.0%

——9Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.11d CVE-2026-779108.8 ALT

58.5%

——18Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.14d CVE-2026-779028.8 ALT

59.2%

——18Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.12d CVE-2026-774968.8 ALT

60.9%

——18Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.11d CVE-2026-75120—

35.2%

——11The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment11d CVE-2026-730277.8 ALT

35.4%

——11External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.11d CVE-2026-729697.0 ALT

23.3%

——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.14d CVE-2026-729687.0 ALT

23.3%

——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.11d CVE-2026-729557.0 ALT

24.1%

——7Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.14d CVE-2026-729347.0 ALT

23.3%

——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.14d CVE-2026-713476.4 MED

15.7%

——5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.11d