60.379 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.379 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-72958 | HIGH 8.2 | microsoft windows_11_24h2 Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72935 | MED 6.7 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-71339 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69966 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69963 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69906 | HIGH 8.2 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69846 | HIGH 8.2 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69820 | HIGH 8.2 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69449 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-69373 | MED 6.7 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69350 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65798 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65797 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65795 | MED 6.7 | microsoft windows_10_1607 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62883 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62881 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62769 | MED 6.7 | microsoft windows_10_1607 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62757 | MED 5.3 | microsoft windows_10_1607 Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. | 0.3% | — |
| CVE-2026-46605 | MED 4.3 | apache activemq Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; | 0.3% | — |
| CVE-2026-42360 | MED 6.5 | apache airflow A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys inside a JSON template structure) to be bypassed when the rendered field exceeded `[core] max_templated | 0.3% | — |
| CVE-2026-30793 | CRIT 9.8 | rustdesk rustdesk Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privilege Escalation. This vulnerability is associated with progra | 0.3% | — |
| CVE-2026-20958 | MED 5.4 | microsoft sharepoint_server Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 0.3% | — |
| CVE-2026-14065 | MED 6.5 | google chrome Insufficient validation of untrusted input in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) | 0.3% | — |
| CVE-2026-14033 | MED 6.5 | google chrome Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) | 0.3% | — |
| CVE-2026-13776 | CRIT 9.8 | google chrome Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) | 0.3% | — |