59.967 CVE tracked
807 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.967 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-87524 | HIGH 8.3 | google chrome Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High | 0.4% | — |
| CVE-2026-83501 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-7899 | HIGH 8.8 | google chrome Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | 0.4% | — |
| CVE-2026-78952 | HIGH 8.3 | google chrome Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 0.4% | — |
| CVE-2026-78454 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-77492 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-77488 | MED 5.5 | microsoft sql_server_2017 Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-72945 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-72937 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-71341 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70290 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70255 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70151 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70145 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70132 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70041 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70017 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69954 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69919 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69914 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69808 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69794 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69770 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69741 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.4% | — |