60.194 CVE tracked
808 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.194 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69528 | HIGH 7.8 | microsoft windows_11_23h2 Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69377 | HIGH 7.8 | microsoft windows_10_1809 Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-66804 | HIGH 7.8 | microsoft windows_10_22h2 Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65773 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-63522 | HIGH 7.8 | microsoft azure_sql_database Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62777 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62721 | HIGH 7.8 | microsoft windows_10_1607 Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61925 | HIGH 7.8 | microsoft windows_10_1607 Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61367 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61365 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61364 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61356 | HIGH 7.8 | microsoft windows_10_1809 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-58631 | HIGH 7.8 | microsoft windows_admin_center Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-58540 | HIGH 7.8 | microsoft windows_10_1607 Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-57107 | HIGH 7.8 | microsoft windows_admin_center Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-57088 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-55014 | HIGH 7.8 | microsoft remote_help Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-55006 | HIGH 7.8 | microsoft exchange_server Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-55001 | HIGH 7.8 | microsoft windows_10_1607 Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-53396 | HIGH 7.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_file() has two bugs in its ACL handling: The return value of nfsd4_acl_to_attr() is silently discarded. When th | 0.3% | — |
| CVE-2026-50512 | HIGH 7.8 | microsoft pc_manager Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50465 | HIGH 7.1 | microsoft windows_11_24h2 Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-50423 | HIGH 7.8 | microsoft windows_10_21h2 Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50405 | HIGH 7.8 | microsoft windows_10_1607 Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50391 | HIGH 7.8 | microsoft windows_10_1607 Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 0.3% | — |