Overview 10,103 matches · 8 in Waratek scope · 1 protected · 134 exploited · 109 CISA KEV · 230 public PoC · 70 EPSS ≥ 0.5
10,103matches
8in Waratek scope0.1%
1protected0.0%
134exploited1.3%
109CISA KEV1.1%
230public PoC2.3%
70EPSS ≥ 0.50.7%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
7
0.1%
Outside Waratek scope
56
0.6%
Not applicable
10,039
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
10,102
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 3,681 / year
20062
Not applicable2
High2
not blocked2
Exploited1
No public exploit1
20071
Not applicable1
High1
not blocked1
No public exploit1
20083
Not applicable3
Critical1
High1
Medium1
not blocked3
No public exploit3
20098
Not applicable8
Critical1
High6
Medium1
not blocked8
Exploited1
Working exploit published1
No public exploit6
201029
Not applicable29
Critical3
High23
Medium3
not blocked29
Exploited3
Working exploit published4
No public exploit22
201156
Not applicable56
High28
Medium28
not blocked56
No public exploit56
201281
Not applicable81
Critical1
High48
Medium32
not blocked81
Exploited2
Working exploit published1
No public exploit78
201342
Not applicable42
Critical4
High36
Medium2
not blocked42
Exploited4
Working exploit published4
No public exploit34
201430
Not applicable30
Critical3
High19
Medium6
Low2
not blocked30
Exploited4
Working exploit published2
No public exploit24
201545
Not applicable45
Critical4
High29
Medium12
not blocked45
Exploited5
Working exploit published5
No public exploit35
2016157
Not applicable157
Critical42
High103
Medium12
not blocked157
Exploited3
Working exploit published18
Forecast only1
No public exploit135
2017295
Outside Waratek scope1
Not applicable294
Critical48
High196
Medium51
not blocked295
Exploited3
Working exploit published18
Proof of concept only2
No public exploit272
2018432
Outside Waratek scope1
Not applicable431
Critical114
High279
Medium38
Low1
not blocked432
Exploited2
Working exploit published16
Proof of concept only3
Forecast only1
No public exploit410
2019574
Outside Waratek scope18
Not applicable556
Critical122
High351
Medium99
Low2
not blocked574
Exploited10
Working exploit published20
Proof of concept only2
Forecast only2
No public exploit540
2020380
Outside Waratek scope11
Not applicable369
Critical59
High241
Medium76
Low4
not blocked380
Exploited6
Working exploit published2
Proof of concept only4
Forecast only1
No public exploit367
2021557
No exploit published2
Outside Waratek scope9
Not applicable546
Critical57
High408
Medium84
Low8
not blocked557
Exploited24
Proof of concept only4
Forecast only13
No public exploit516
2022732
No exploit published1
Outside Waratek scope5
Not applicable726
Critical44
High536
Medium146
Low6
not blocked732
Exploited10
Working exploit published1
Proof of concept only53
No public exploit668
2023645
Outside Waratek scope2
Not applicable643
Critical34
High473
Medium136
Low2
not blocked645
Exploited14
Working exploit published2
Proof of concept only78
Forecast only2
No public exploit549
20241,264
No exploit published1
Outside Waratek scope2
Not applicable1,261
Critical113
High1,025
Medium111
Low15
not blocked1,264
Exploited18
Proof of concept only58
Forecast only1
No public exploit1,187
20251,089
Outside Waratek scope3
Not applicable1,086
Critical55
High916
Medium94
Low24
not blocked1,089
Exploited18
Working exploit published5
Proof of concept only43
No public exploit1,023
20263,681
Protected by Waratek1
No exploit published3
Outside Waratek scope4
Not applicable3,673
Critical427
High2,769
Medium418
Low64
Unknown3
blocked by ARMR today1
not blocked3,680
Exploited6
Working exploit published1
Proof of concept only146
No public exploit3,528
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-119965 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119961 | High | 2026-11-10 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-119953 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119951 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-119947 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119945 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-119929 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119928 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119918 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-119895 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119894 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119893 | High | 2026-11-10 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119888 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119874 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119873 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119871 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119869 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119866 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119865 | High | 2026-11-10 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119861 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119860 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119859 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119844 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119837 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119836 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Management Services allows an authorized attacker to disclose information locally. |
| CVE-2026-119835 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119826 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119405 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119403 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119402 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119401 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119397 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119391 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119389 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119388 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119387 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-119386 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118732 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118730 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118729 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118716 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118713 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118710 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118706 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118703 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118383 | Critical | 2026-11-10 | Not applicable | No public exploit | A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up. The condition can be caused by requests that do not require authentication, and may result in the server terminating unexpectedly or, under certain conditions, arbitrary code execution in the context of the server process. Replica set members are affected, including the shard and config server replica set members of sharded clusters; standalone mongod instances are not. |
| CVE-2026-118224 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118223 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118219 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118218 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118217 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118216 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118215 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118145 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-118126 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-118125 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-117546 | High | 2026-11-10 | Not applicable | No public exploit | Photoshop Desktop is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| CVE-2026-116707 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally. |
| CVE-2026-116706 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-116698 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
| CVE-2026-114170 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113864 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113862 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-113861 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113860 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113859 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-113842 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113820 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113819 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113769 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113762 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113759 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-113755 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113752 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-112980 | Medium | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112978 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112976 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112970 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112968 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows COM allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112812 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112798 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112797 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112793 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-112792 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112791 | High | 2026-11-10 | Not applicable | No public exploit | Time-of-check time-of-use (toctou) race condition in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112790 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112766 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112764 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112763 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112761 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112756 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112751 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally. |
| CVE-2026-112750 | Medium | 2026-11-10 | Not applicable | No public exploit | Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-112737 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-112735 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-112734 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-111304 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-111289 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-111286 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-110068 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |