59.529 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.529 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70314 | MED 5.5 | microsoft 365_apps Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70312 | MED 5.5 | microsoft 365_apps Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70310 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70295 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70294 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70293 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70292 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70290 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70288 | MED 5.5 | microsoft windows_10_1607 Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-70284 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70232 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70214 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70211 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70199 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70145 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70087 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-70085 | MED 5.5 | microsoft windows_server_2012 Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70083 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70071 | MED 5.5 | microsoft windows_10_1607 Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally. | 0.2% | — |
| CVE-2026-70044 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70041 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70017 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69999 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69954 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.4% | — |