Hunt List
12,868 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
68
|
CVE-2026-56645 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor | |
|
68
|
CVE-2026-57974 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unau | |
|
68
|
CVE-2026-57981 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke | |
|
68
|
CVE-2026-57102 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Inclusion of functionality from untrusted control sphere in Visual Studio Code a | |
|
68
|
CVE-2026-62785 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protoc | |
|
68
|
CVE-2026-62795 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an | |
|
68
|
CVE-2026-62822 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker t | |
|
68
|
CVE-2026-62824 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized atta | |
|
68
|
CVE-2026-62870 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-72984 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
68
|
CVE-2026-50474 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Remote Desktop Client allows an unauthorized attacker to execu | |
|
68
|
CVE-2026-57090 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-57094 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-58594 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to | |
|
68
|
CVE-2026-65807 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Offic | |
|
68
|
CVE-2026-70329 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorize | |
|
68
|
CVE-2026-105591 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-105593 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-105595 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to | |
|
68
|
CVE-2026-105596 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-105597 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-105598 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-105716 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-88155 |
8.8 | 0.0082 | NET LOW CX NO UI | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized a | |
|
68
|
CVE-2026-62706 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized | |
|
68
|
CVE-2026-62744 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-77482 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-69291 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an | |
|
68
|
CVE-2026-69334 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an | |
|
68
|
CVE-2026-69386 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-69434 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacke | |
|
68
|
CVE-2026-69439 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized atta | |
|
68
|
CVE-2026-69442 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t | |
|
68
|
CVE-2026-69499 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Integer overflow or wraparound in Windows Imaging Component allows an unauthoriz | |
|
68
|
CVE-2026-69511 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-69598 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized att | |
|
68
|
CVE-2026-69601 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut | |
|
68
|
CVE-2026-69629 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at | |
|
68
|
CVE-2026-69632 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Use after free in Microsoft Office allows an unauthorized attacker to execute co | |
|
68
|
CVE-2026-69669 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to | |
|
68
|
CVE-2026-70203 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Media Player allows an unauthorized attack | |
|
68
|
CVE-2026-71328 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to e | |
|
68
|
CVE-2026-72933 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an u | |
|
68
|
CVE-2026-72960 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Media Player allows an unauthorized attack | |
|
68
|
CVE-2026-72972 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-72973 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-73006 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthoriz | |
|
68
|
CVE-2026-73013 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a | |
|
68
|
CVE-2026-73018 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to e | |
|
68
|
CVE-2026-73023 |
8.8 | 0.0082 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a |