60.383 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.383 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-83686 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83671 | MED 6.5 | microsoft windows_10_1809 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83571 | MED 5.5 | microsoft windows_10_1607 Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83565 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-80725 | CRIT 9.8 | In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GRO_LEGACY_MAX_SIZE (64KB), BIG TCP should only be permitted for plain IPv4 TCP and pla | 0.5% | — |
| CVE-2026-76427 | MED 4.9 | cisco identity_services_engine A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with | 0.5% | — |
| CVE-2026-70468 | HIGH 8.1 | fortinet fortimanager A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7. | 0.5% | — |
| CVE-2026-70295 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70294 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70293 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70292 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70284 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70227 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70211 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70135 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70090 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70041 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70017 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70011 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69999 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69967 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69954 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69919 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-69914 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 0.5% | — |