59.703 CVE tracked
805 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.703 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2020-12981 | HIGH 7.8 | amd radeon_pro_software An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service. | 0.3% | — |
| CVE-2018-6252 | MED 5.5 | nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to restricted functionality that is unnecessary to production usage, and which may result in denial of servi | 0.3% | — |
| CVE-2018-18098 | HIGH 7.3 | intel sgx_platform_software Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access. | 0.3% | — |
| CVE-2017-6260 | MED 6.5 | nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to denial of service. | 0.3% | — |
| CVE-2017-0320 | MED 5.5 | nvidia gpu_driver All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system. | 0.3% | — |
| CVE-2017-0319 | MED 5.5 | nvidia gpu_driver All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system. | 0.3% | — |
| CVE-2010-3005 | MED 6.8 | hp operations_agent Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors. | 0.3% | — |
| CVE-2026-78384 | HIGH 7.5 | apache cxf CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to gigabytes on the heap. Reachable via JWE decryption when zip=DEF (e.g. JoseSessionTokenProvider with RSA-OAEP key wr | 0.3% | — |
| CVE-2026-65583 | CRIT 9.1 | apache cxf Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued I | 0.3% | — |
| CVE-2026-57093 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-56187 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-54989 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-54129 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50688 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50674 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50491 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50490 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50476 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50406 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50396 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50393 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50390 | HIGH 7.0 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50359 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50358 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50307 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0.3% | — |