CVE Watch403,917 en archivo total

Vulnerabilidades explotables hoy

16,636en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,758

Nuevos KEV · 24H0

Exploit Today ≥ 701,691

Distribución · última ventana

Crítico
5,616
Alto
21,711
Medio
20,117
Bajo
2,110

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades9,121–9,160 · 16,636

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-705808.8 ALT

27.9%

——8Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.11d CVE-2026-705718.1 ALT

72.1%

——22Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.14d CVE-2026-705667.8 ALT

32.6%

——10Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.11d CVE-2026-703438.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.14d CVE-2026-703037.8 ALT

36.4%

——11Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.6d CVE-2026-703028.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12d CVE-2026-703018.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12d CVE-2026-703009.8 CRÍ

66.1%

——20Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.13d CVE-2026-702998.8 ALT

27.9%

——8Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.14d CVE-2026-702986.5 MED

68.9%

——21Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.13d CVE-2026-702978.8 ALT

66.9%

——20Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.14d CVE-2026-702955.5 MED

39.5%

——12Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702945.5 MED

39.5%

——12Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702935.5 MED

39.5%

——12Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702925.5 MED

39.6%

——12Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702919.8 CRÍ

70.8%

——21Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12d CVE-2026-702885.5 MED

28.6%

——9Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702878.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12d CVE-2026-702867.8 ALT

36.0%

——11Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.11d CVE-2026-702857.8 ALT

31.6%

——9Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6d CVE-2026-702845.5 MED

39.5%

——12Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6d CVE-2026-702828.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12d CVE-2026-702817.5 ALT

65.9%

——20Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.12d CVE-2026-702804.4 MED

37.1%

——11Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.11d CVE-2026-702799.3 CRÍ

69.9%

——21Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.14d CVE-2026-702787.8 ALT

23.3%

——7Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.11d CVE-2026-702775.5 MED

49.8%

——15Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.11d CVE-2026-702767.0 ALT

21.2%

——6Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.12d CVE-2026-702758.8 ALT

60.9%

——18Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.11d CVE-2026-702747.8 ALT

29.7%

——9Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.14d CVE-2026-702737.0 ALT

23.2%

——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5d CVE-2026-702727.0 ALT

20.9%

——6Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11d CVE-2026-702717.0 ALT

25.8%

——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5d CVE-2026-702705.5 MED

38.9%

——12Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.11d CVE-2026-702698.1 ALT

56.0%

——17Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12d CVE-2026-702688.8 ALT

59.8%

——18Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12d CVE-2026-702677.2 ALT

63.1%

——19Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.13d CVE-2026-702668.8 ALT

64.8%

——19Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.13d CVE-2026-702645.5 MED

41.7%

——13Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.14d CVE-2026-702636.5 MED

62.8%

——19Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.12d