60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-83951 | MED 5.5 | microsoft 365_apps Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83949 | MED 5.5 | microsoft 365_apps Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83933 | MED 5.5 | microsoft windows_10_21h2 Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83907 | MED 5.5 | microsoft windows_10_21h2 Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-83904 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83898 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83893 | MED 5.5 | microsoft windows_10_1809 Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83892 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83887 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83884 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83875 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83870 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83864 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83854 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Notification allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-83849 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83835 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. | 0.9% | — |
| CVE-2026-83798 | MED 5.5 | microsoft windows_10_1607 Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. | 0.2% | — |
| CVE-2026-83794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83787 | MED 5.5 | microsoft windows_10_1607 Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-83773 | MED 5.5 | microsoft windows_11_24h2 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-83765 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83764 | MED 5.5 | microsoft windows_10_1809 Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-83760 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83755 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83747 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. | 0.5% | — |