59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted ascending |
|---|---|---|---|---|
| CVE-2026-70579 | HIGH 7.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-70578 | HIGH 7.0 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70577 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70575 | MED 5.3 | microsoft windows_11_23h2 Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. | 1.0% | — |
| CVE-2026-70574 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70573 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70572 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70570 | HIGH 7.5 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.7% | — |
| CVE-2026-70569 | HIGH 7.8 | microsoft windows_11_23h2 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70568 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70567 | HIGH 7.0 | microsoft windows_11_24h2 Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70565 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70564 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70563 | HIGH 8.1 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | 0.8% | — |
| CVE-2026-70562 | HIGH 7.0 | microsoft windows_10_1607 Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70469 | HIGH 7.5 | apache nifi Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances | 0.6% | — |
| CVE-2026-70468 | HIGH 8.1 | fortinet fortimanager A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7. | 0.5% | — |
| CVE-2026-70467 | LOW 3.8 | fortinet fortisiem A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiS | 0.3% | — |
| CVE-2026-70466 | MED 5.3 | fortinet fortiweb A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <inse | 0.3% | — |
| CVE-2026-70465 | HIGH 8.1 | fortinet forticlient A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS respons | 0.5% | — |
| CVE-2026-70449 | MED 5.3 | apache wicket Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including files under WEB-INF that the servlet container would not otherwise serve. The locale, style and variati | 0.9% | — |
| CVE-2026-70355 | HIGH 7.3 | microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-70354 | HIGH 7.8 | microsoft .net Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-70352 | CRIT 10.0 | microsoft azure_ai_language_authoring Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. | 0.9% | — |
| CVE-2026-70351 | HIGH 8.8 | microsoft webp_image_extension Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | 0.8% | — |