Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 11
- Added in 7 days
- 6
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-70455 | Samba Rsync | 7.5high | under 1% · top 55% | — | — | |
| CVE-2026-70019 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69855 | Microsoft Azure Copilot | 7.7high | under 1% · top 61% | — | — | |
| CVE-2026-69839 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69781 | Microsoft Windows 11 24h2 | 6.5medium | Not scored | — | — | |
| CVE-2026-69739 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-69734 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-69719 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-69683 | Microsoft Sharepoint Server | 6.5medium | Not scored | — | — | |
| CVE-2026-69642 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69636 | Microsoft Sharepoint Server | 6.5medium | Not scored | — | — | |
| CVE-2026-69626 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-69624 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69562 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69497 | Microsoft Windows 10 1607 | 6.5medium | Not scored | — | — | |
| CVE-2026-69469 | Not specified | 6.6medium | Not scored | — | — | |
| CVE-2026-69409 | Microsoft Sharepoint Server | 6.5medium | Not scored | — | — | |
| CVE-2026-69395 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69375 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69374 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69361 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69306 | Microsoft Visual Studio Code | 8.2high | under 1% · top 65% | — | — | |
| CVE-2026-69297 | Microsoft Windows 10 1607 | 6.5medium | Not scored | — | — | |
| CVE-2026-69267 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-69222 | Not specified | 7.5high | under 1% · top 70% | — | — |