CVE Watchtower

🔍 Filter Threats
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-114169 HIGH
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114167 HIGH
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
HIGH??????????NVD3 days ago
CVE-2026-114166 MEDIUM
Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.
MEDIUM??????????NVD3 days ago
CVE-2026-114165 HIGH
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
HIGH??????????NVD3 days ago
CVE-2026-114162 CRITICAL
Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.
CRITICAL??????????NVD3 days ago
CVE-2026-114161 HIGH
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate ...
HIGH??????????NVD3 days ago
CVE-2026-114160 CRITICAL
Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
CRITICAL??????????NVD3 days ago
CVE-2026-114159 HIGH
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114158 HIGH
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114157 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to...
HIGH??????????NVD3 days ago
CVE-2026-114164 HIGH
Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114156 MEDIUM
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-114155 HIGH
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
HIGH??????????NVD3 days ago
CVE-2026-114154 HIGH
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
HIGH??????????NVD3 days ago
CVE-2026-114152 HIGH
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114151 HIGH
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
HIGH??????????NVD3 days ago
CVE-2026-114150 MEDIUM
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
MEDIUM??????????NVD3 days ago
CVE-2026-114149 HIGH
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
HIGH??????????NVD3 days ago
CVE-2026-114147 HIGH
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
HIGH??????????NVD3 days ago
CVE-2026-114146 CRITICAL
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CRITICAL??????????NVD3 days ago
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.