CVE Watchtower

🔍 Filter Threats
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-119985 HIGH
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119983 HIGH
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
HIGH??????????NVD3 days ago
CVE-2026-119982 MEDIUM
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-119981 HIGH
Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119976 MEDIUM
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose in...
MEDIUM??????????NVD3 days ago
CVE-2026-119975 HIGH
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker t...
HIGH??????????NVD3 days ago
CVE-2026-119974 HIGH
Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locall...
HIGH??????????NVD3 days ago
CVE-2026-119972 MEDIUM
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-119971 MEDIUM
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-119970 MEDIUM
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-119969 HIGH
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119967 HIGH
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119966 HIGH
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119965 MEDIUM
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
MEDIUM??????????NVD3 days ago
CVE-2026-119964 HIGH
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119963 HIGH
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119962 HIGH
Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-119961 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows ...
HIGH??????????NVD3 days ago
CVE-2026-119960 HIGH
Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119959 MEDIUM
Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
MEDIUM??????????NVD3 days ago
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.