59.389 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.132 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-72979 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-70296 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69910 | CRIT 9.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69829 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69824 | CRIT 9.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69819 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69769 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69768 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69730 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69715 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69595 | CRIT 9.8 | microsoft windows_server_2012 Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69590 | CRIT 9.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 1.0% | — |
| CVE-2026-69586 | CRIT 9.8 | microsoft windows_10_1607 Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69579 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69525 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69496 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69493 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69491 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69463 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69431 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69408 | CRIT 9.8 | microsoft windows_10_1607 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69276 | CRIT 9.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-67643 | CRIT 9.8 | microsoft sql_server_2022 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-67631 | CRIT 9.8 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-65816 | CRIT 10.0 | microsoft azure_web_apps Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | 1.0% | — |