60.383 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.383 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-83570 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83567 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83518 | HIGH 7.8 | microsoft windows_11_23h2 Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83514 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83513 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83508 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-75156 | CRIT 9.1 | apache apache-airflow-providers-fab Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `id_token`s during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the si | 0.4% | — |
| CVE-2026-70566 | HIGH 7.8 | microsoft windows_10_1607 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70285 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70225 | HIGH 7.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70172 | HIGH 7.8 | microsoft windows_10_1607 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70143 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-70139 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70138 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70121 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70114 | HIGH 7.8 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70113 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70112 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-70102 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70093 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70064 | HIGH 7.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70059 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70048 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70027 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70023 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.4% | — |