60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96925 | MED 5.5 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96921 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96910 | MED 5.5 | microsoft windows_10_1607 Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96860 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96859 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96858 | MED 5.5 | microsoft windows_10_21h2 Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | 0.5% | — |
| CVE-2026-96857 | MED 5.5 | microsoft windows_10_1809 Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96855 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96854 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96850 | MED 5.5 | microsoft windows_10_1809 Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96849 | MED 5.5 | microsoft windows_11_26h1 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96848 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96846 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96321 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96316 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96315 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96314 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96311 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96218 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. | 0.6% | — |
| CVE-2026-96183 | MED 5.5 | microsoft windows_11_24h2 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-95904 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-95640 | MED 5.5 | adobe photoshop Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th | 0.2% | — |
| CVE-2026-90632 | MED 5.5 | apache openoffice Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the d | — | — |