59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted ascending |
|---|---|---|---|---|
| CVE-2026-69496 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69495 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69494 | HIGH 8.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69493 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69492 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69491 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69490 | MED 6.8 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0.4% | — |
| CVE-2026-69489 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69488 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69486 | HIGH 8.8 | microsoft edge_chromium Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69485 | HIGH 8.8 | microsoft windows_10_1607 Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69483 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-69482 | HIGH 7.1 | microsoft windows_10_1607 Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally. | 0.5% | — |
| CVE-2026-69481 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69480 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69479 | HIGH 8.4 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-69478 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69477 | HIGH 7.3 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-69476 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69475 | HIGH 7.8 | microsoft windows_10_1607 Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69474 | MED 4.8 | microsoft windows_10_1607 Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. | 0.7% | — |
| CVE-2026-69473 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69472 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69470 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69469 | MED 6.6 | microsoft windows_10_1809 Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. | 0.5% | — |