Vulnerabilities
Tracked app vulnerabilities
7,765 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 7,765
- Actively exploited
- 213
- Publication window
- 2007-08-28 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-8950
HIGH 9.3
1 app
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird … |
|
CVE-2026-8949
HIGH 7.5
1 app
Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
|
CVE-2026-8948
CRITICAL 9.1
1 app
Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
|
CVE-2026-8947
HIGH 7.3
1 app
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, a… |
|
CVE-2026-8946
HIGH 7.5
1 app
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Th… |
|
CVE-2025-54518
HIGH 7.0
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a dif… |
|
CVE-2026-41088
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-40414
HIGH 7.4
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40413
HIGH 7.4
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40401
HIGH 7.1
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40399
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
|
CVE-2026-40397
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-40369
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-35417
HIGH 7.8
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-35416
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-34345
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-34336
HIGH 7.8
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-34330
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p… |
|
CVE-2026-33841
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33840
HIGH 7.8
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32170
MEDIUM 6.7
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42896
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-42825
HIGH 7.0
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-41097
HIGH 6.7
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2026-41096
CRITICAL 9.8
Windows DNS Client Remote Code Execution Vulnerability |
|
CVE-2026-41095
HIGH 7.8
Data Deduplication Elevation of Privilege Vulnerability |
|
CVE-2026-41089
CRITICAL 9.8
Windows Netlogon Remote Code Execution Vulnerability |
|
CVE-2026-40415
HIGH 8.1
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-40410
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-40408
HIGH 7.8
Windows WAN ARP Driver Elevation of Privilege Vulnerability |
|
CVE-2026-40407
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2026-40406
HIGH 7.5
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2026-40405
HIGH 7.5
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40403
CRITICAL 8.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2026-40402
CRITICAL 9.3
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-40398
HIGH 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-40382
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-40380
HIGH 6.2
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
|
CVE-2026-40377
HIGH 7.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2026-35424
HIGH 7.5
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2026-35423
HIGH 5.4
Windows 11 Telnet Client Information Disclosure Vulnerability |
|
CVE-2026-35422
HIGH 6.5
Windows TCP/IP Driver Security Feature Bypass Vulnerability |
|
CVE-2026-35421
CRITICAL 7.8
Windows GDI Remote Code Execution Vulnerability |
|
CVE-2026-35420
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-35419
HIGH 5.5
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2026-35418
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-35415
HIGH 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-34351
HIGH 7.8
Windows TCP/IP Elevation of Privilege Vulnerability |
|
CVE-2026-34350
HIGH 6.5
Windows Storport Miniport Driver Denial of Service Vulnerability |
|
CVE-2026-34347
HIGH 7.0
Windows Win32k Elevation of Privilege Vulnerability |