59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted ascending |
|---|---|---|---|---|
| CVE-2026-72985 | MED 6.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. | 0.4% | — |
| CVE-2026-72984 | HIGH 8.8 | microsoft edge_chromium Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-72983 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72982 | CRIT 9.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72981 | HIGH 8.1 | microsoft windows_10_1607 Use after free in IP Helper allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-72980 | MED 4.4 | microsoft windows_10_1607 Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. | 0.6% | — |
| CVE-2026-72979 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72978 | MED 5.9 | microsoft windows_10_1607 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 1.0% | — |
| CVE-2026-72977 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-72976 | MED 5.0 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-72975 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0.9% | — |
| CVE-2026-72974 | MED 6.5 | microsoft 365_apps Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 0.9% | — |
| CVE-2026-72973 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-72972 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-72971 | MED 5.5 | microsoft windows_11_26h1 Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-72970 | HIGH 8.3 | microsoft edge_chromium Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-72967 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72966 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-72965 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72964 | MED 5.5 | microsoft windows_10_1607 Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-72963 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72962 | HIGH 8.2 | microsoft windows_10_1809 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72961 | HIGH 8.2 | microsoft windows_10_1607 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72960 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-72959 | HIGH 8.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.9% | — |