60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70284 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70277 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 0.6% | — |
| CVE-2026-70270 | MED 5.5 | microsoft windows_10_1607 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70261 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-70260 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-70235 | MED 5.5 | microsoft windows_11_24h2 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. | 0.3% | — |
| CVE-2026-70234 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70232 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 0.9% | — |
| CVE-2026-70227 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70216 | MED 5.5 | microsoft windows_10_1607 Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-70214 | MED 5.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.6% | — |
| CVE-2026-70211 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70208 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70201 | MED 5.5 | microsoft windows_server_2012 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | 0.5% | — |
| CVE-2026-70199 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 0.9% | — |
| CVE-2026-70173 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70145 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70141 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70137 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70135 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70128 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70090 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70087 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-70085 | MED 5.5 | microsoft windows_server_2012 Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70084 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. | 0.5% | — |