60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-88162 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-88158 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-88140 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-87709 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-87698 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85938 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-85935 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85910 | MED 5.5 | microsoft windows_11_24h2 Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85909 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85875 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85865 | MED 5.5 | microsoft windows_10_1607 Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-85857 | MED 5.5 | microsoft windows_10_1607 Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85852 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85831 | MED 5.5 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85830 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85815 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85812 | MED 5.5 | microsoft windows_10_21h2 Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85793 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-85374 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85336 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85320 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-85260 | MED 5.5 | apache camel Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-mllp component carries a logPhi option that governs whether HL7 pay | 0.2% | — |
| CVE-2026-84011 | MED 5.5 | microsoft windows_11_23h2 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-83991 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. | 0.3% | — |