Hunt List
12,833 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-45618 |
10.0 | 0.0082 | NET NO AUTH LOW CX NO UI | LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version | |
|
80
|
CVE-2026-79847 |
10.0 | 0.0082 | NET NO AUTH LOW CX NO UI | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead t | |
|
68
|
CVE-2026-78521 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-78524 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execu | |
|
68
|
CVE-2026-78525 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office Outlook allows an unauthorized attacker to ex | |
|
68
|
CVE-2026-78526 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-80080 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Double free in Microsoft Office Word allows an unauthorized attacker to execute | |
|
68
|
CVE-2026-80081 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to | |
|
68
|
CVE-2026-80085 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-81952 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-83992 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a | |
|
68
|
CVE-2026-85893 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke | |
|
68
|
CVE-2026-68828 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
68
|
CVE-2026-69266 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Windows DHCP Server allows an unauthorized att | |
|
68
|
CVE-2026-69285 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t | |
|
68
|
CVE-2026-69461 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to e | |
|
68
|
CVE-2026-69486 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor | |
|
68
|
CVE-2026-69494 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attac | |
|
68
|
CVE-2026-69495 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Event Logging Service allows an unauthoriz | |
|
68
|
CVE-2026-69518 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized atta | |
|
68
|
CVE-2026-69529 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-69556 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-69649 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized | |
|
68
|
CVE-2026-69671 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-69678 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to | |
|
68
|
CVE-2026-69686 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-69722 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-69742 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft Office Publisher allows an unauthori | |
|
68
|
CVE-2026-69759 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-69764 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-69767 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to | |
|
68
|
CVE-2026-69772 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Network File System allows an unauthorized | |
|
68
|
CVE-2026-69778 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-69797 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to | |
|
68
|
CVE-2026-69860 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a | |
|
68
|
CVE-2026-70351 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unaut | |
|
68
|
CVE-2026-70586 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to e | |
|
68
|
CVE-2026-72940 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker t | |
|
68
|
CVE-2026-72986 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to e | |
|
68
|
CVE-2026-77495 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a | |
|
68
|
CVE-2026-77504 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Double free in Microsoft Office Word allows an unauthorized attacker to execute | |
|
68
|
CVE-2026-77907 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to e | |
|
68
|
CVE-2026-78504 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-78505 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t | |
|
68
|
CVE-2026-78511 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-78517 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-80074 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
68
|
CVE-2026-80077 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
68
|
CVE-2026-83998 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
68
|
CVE-2026-85877 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Print Spooler Components allows an unautho |