60.194 CVE tracked
807 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.194 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96846 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-95904 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-83942 | HIGH 7.8 | microsoft windows_10_1809 Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83834 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-73014 | HIGH 7.8 | microsoft windows_10_1607 Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69907 | HIGH 7.8 | microsoft windows_10_1607 Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69528 | HIGH 7.8 | microsoft windows_11_23h2 Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69377 | HIGH 7.8 | microsoft windows_10_1809 Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-66804 | HIGH 7.8 | microsoft windows_10_22h2 Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65773 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-64024 | CRIT 9.4 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always | 0.3% | — |
| CVE-2026-63522 | HIGH 7.8 | microsoft azure_sql_database Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62777 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62721 | HIGH 7.8 | microsoft windows_10_1607 Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61925 | HIGH 7.8 | microsoft windows_10_1607 Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61367 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61365 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61364 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61356 | HIGH 7.8 | microsoft windows_10_1809 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-58631 | HIGH 7.8 | microsoft windows_admin_center Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-58540 | HIGH 7.8 | microsoft windows_10_1607 Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-57107 | HIGH 7.8 | microsoft windows_admin_center Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-57088 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-55014 | HIGH 7.8 | microsoft remote_help Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-55006 | HIGH 7.8 | microsoft exchange_server Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |