59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted descending |
|---|---|---|---|---|
| CVE-2026-69361 | MED 6.5 | microsoft exchange_server Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | 0.8% | — |
| CVE-2026-69360 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69359 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69358 | HIGH 7.1 | microsoft windows_10_1607 Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-69357 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | 0.6% | — |
| CVE-2026-69356 | CRIT 9.3 | microsoft exchange_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | 0.8% | — |
| CVE-2026-69355 | HIGH 8.8 | microsoft exchange_server External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69353 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69352 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69351 | MED 5.5 | microsoft windows_10_1607 Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69350 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-6935 | HIGH 7.8 | ibm concert IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execut | 0.1% | — |
| CVE-2026-69349 | MED 5.7 | microsoft windows_10_1607 Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network. | 0.9% | — |
| CVE-2026-69348 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69347 | HIGH 7.4 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-69346 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69345 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69344 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69343 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69342 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1.2% | — |
| CVE-2026-69341 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69340 | HIGH 7.1 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0.6% | — |
| CVE-2026-69339 | MED 5.5 | microsoft windows_11_24h2 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69338 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. | 0.6% | — |
| CVE-2026-69337 | HIGH 7.1 | microsoft windows_10_1607 Double free in Windows Registry allows an authorized attacker to elevate privileges over a network. | 0.6% | — |