60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70083 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70071 | MED 5.5 | microsoft windows_10_1607 Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70057 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-70055 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-70044 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. | 0.6% | — |
| CVE-2026-70041 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70017 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70011 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69999 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69979 | MED 5.5 | microsoft windows_10_21h2 Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-69971 | MED 5.5 | microsoft windows_11_24h2 Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69967 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69954 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69919 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69914 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69905 | MED 5.5 | microsoft windows_10_1809 Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69862 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69808 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69794 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69770 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69741 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69721 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69684 | MED 5.5 | microsoft windows_10_1607 Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69675 | MED 5.5 | microsoft windows_server_2012 Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally. | 0.5% | — |