59.529 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.529 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96846 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-96321 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96316 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96315 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96314 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96311 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96218 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. | 0.6% | — |
| CVE-2026-96183 | MED 5.5 | microsoft windows_11_24h2 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-95904 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-95640 | MED 5.5 | adobe photoshop Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th | 0.2% | — |
| CVE-2026-88162 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-85875 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85815 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85812 | MED 5.5 | microsoft windows_10_21h2 Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85793 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85374 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85336 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-84011 | MED 5.5 | microsoft windows_11_23h2 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-83991 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-83951 | MED 5.5 | microsoft 365_apps Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83949 | MED 5.5 | microsoft 365_apps Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83893 | MED 5.5 | microsoft windows_10_1809 Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83870 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 0.4% | — |