60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.368 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69674 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-69672 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69644 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-69627 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69618 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69616 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69609 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69568 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69554 | MED 5.5 | microsoft windows_10_1607 Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69531 | MED 5.5 | microsoft windows_10_1607 Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69527 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69504 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69457 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69453 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69406 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69403 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69390 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69376 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69369 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69367 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69353 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69351 | MED 5.5 | microsoft windows_10_1607 Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69345 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69344 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69343 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.4% | — |