CVE Watchtower

🔍 Filter Threats
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-119404 MEDIUM
Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-119403 HIGH
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119402 HIGH
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119399 HIGH
Double free in Windows Installer allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119398 HIGH
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119397 HIGH
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119396 MEDIUM
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
MEDIUM??????????NVD3 days ago
CVE-2026-119395 MEDIUM
Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.
MEDIUM??????????NVD3 days ago
CVE-2026-119394 MEDIUM
Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
MEDIUM??????????NVD3 days ago
CVE-2026-119393 HIGH
Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119392 HIGH
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.
HIGH??????????NVD3 days ago
CVE-2026-119391 HIGH
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119390 HIGH
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.
HIGH??????????NVD3 days ago
CVE-2026-119389 HIGH
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119388 HIGH
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119387 HIGH
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119386 HIGH
Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-119385 MEDIUM
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker...
MEDIUM??????????NVD3 days ago
CVE-2026-119383 MEDIUM
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
MEDIUM??????????NVD3 days ago
CVE-2026-119382 HIGH
Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.