59.529 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.529 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-98080 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG] When running btrfs/252 with quota enabled through MKFS_OPTIONS="-O quota", it has a high chance to trigger the | 0.1% | — |
| CVE-2026-98062 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo arguments as scalar The signal_generate and signal_deliver tracepoints declare their info argument as a struct kernel_siginfo pointer. btf_ctx_access() th | 0.1% | — |
| CVE-2026-98054 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count strace_open() invokes try_module_get() which on success takes the module reference. If any follow up operation causes strace_open() t | 0.1% | — |
| CVE-2026-98053 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_config access Existing code accesses enties found in ->init_configs array through indexes that are part of ->config_ids array. Those two are limited | 0.1% | — |
| CVE-2026-98051 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times The loop initialised next_index from intf->tx_spb_index on every iteration, so incr_ring() always produced the same result an | 0.1% | — |
| CVE-2026-98049 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpf_convert_ctx_accesses() rewrites an atomic on an arena pointer from BPF_STX | BPF_ATOMIC to BPF_STX | BPF_PROBE_ATOMIC, and it runs | 0.1% | — |
| CVE-2026-97790 | MED 5.5 | microsoft windows_11_24h2 Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-97744 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-97014 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-97005 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96948 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-96944 | MED 5.5 | microsoft windows_11_24h2 Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-96935 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96930 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96927 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-96926 | MED 5.5 | microsoft windows_10_1607 Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96925 | MED 5.5 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96921 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96857 | MED 5.5 | microsoft windows_10_1809 Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96855 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96854 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-96851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96850 | MED 5.5 | microsoft windows_10_1809 Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96849 | MED 5.5 | microsoft windows_11_26h1 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96848 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |