Hunt List
12,891 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-44181 |
10.0 | 0.0077 | NET NO AUTH LOW CX NO UI | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distr | |
|
79
|
CVE-2026-65321 |
9.3 | 0.0077 | NET NO AUTH LOW CX NO UI | PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unau | |
|
78
|
CVE-2026-71560 |
9.1 | 0.0077 | NET NO AUTH LOW CX NO UI | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue | |
|
77
|
CVE-2026-5260 |
8.2 | 0.0077 | NET NO AUTH LOW CX NO UI | A flaw was found in libgnutls. A remote attacker, by sending an extremely short | |
|
75
|
CVE-2026-33034 |
7.5 | 0.0077 | NET NO AUTH LOW CX NO UI | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4 | |
|
68
|
CVE-2026-102849 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-102850 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att | |
|
68
|
CVE-2026-69326 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to e | |
|
68
|
CVE-2026-83725 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Windows Search Component allows an unaut | |
|
68
|
CVE-2026-83851 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Partition Management Driver allows an unau | |
|
68
|
CVE-2026-32174 |
8.8 | 0.0077 | NET LOW CX NO UI | Improper authentication in Azure Bot Service allows an authorized attacker to el | |
|
68
|
CVE-2026-83831 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker t | |
|
68
|
CVE-2026-85898 |
8.8 | 0.0077 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
63
|
CVE-2026-44758 |
9.1 | 0.0077 | NET LOW CX NO UI | SAP Manufacturing Integration and Intelligence (MII) allows an attacker with hig | |
|
63
|
CVE-2025-13590 |
9.1 | 0.0077 | NET LOW CX NO UI | A malicious actor with administrative privileges can upload an arbitrary file to | |
|
56
|
CVE-2026-69322 |
8.0 | 0.0077 | NET LOW CX | Double free in Microsoft Windows Search Component allows an authorized attacker | |
|
56
|
CVE-2026-69332 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate priv | |
|
56
|
CVE-2026-69346 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Print Spooler Components allows an authori | |
|
56
|
CVE-2026-69365 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows | |
|
56
|
CVE-2026-69427 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to eleva | |
|
56
|
CVE-2026-69462 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Error Reporting allows an authorized attac | |
|
56
|
CVE-2026-69503 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows USB Driver allows an authorized attacker | |
|
56
|
CVE-2026-69512 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacke | |
|
56
|
CVE-2026-69619 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows exFAT File System allows an authorized attacker to | |
|
56
|
CVE-2026-69625 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Connected User Experiences and Telemetry a | |
|
56
|
CVE-2026-69643 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacke | |
|
56
|
CVE-2026-69714 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows Device Association Service allows an auth | |
|
56
|
CVE-2026-69727 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Biometric Service allows an authorized att | |
|
56
|
CVE-2026-69773 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Biometric Service allows an authorized att | |
|
56
|
CVE-2026-69826 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Biometric Service allows an authorized att | |
|
56
|
CVE-2026-68827 |
8.0 | 0.0077 | NET LOW CX | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized atta | |
|
56
|
CVE-2026-68834 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to ele | |
|
56
|
CVE-2026-68838 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to ele | |
|
56
|
CVE-2026-68876 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Program Compatibility Assistant Service al | |
|
56
|
CVE-2026-68878 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized atta | |
|
56
|
CVE-2026-68880 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to el | |
|
56
|
CVE-2026-68894 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Error Reporting allows an authorized attac | |
|
56
|
CVE-2026-69271 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack | |
|
56
|
CVE-2026-69301 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to e | |
|
56
|
CVE-2026-69371 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attack | |
|
56
|
CVE-2026-69418 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Volume Manager Driver allows an authorized attacke | |
|
56
|
CVE-2026-69458 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate | |
|
56
|
CVE-2026-69481 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows Enterprise App Management allows an author | |
|
56
|
CVE-2026-69505 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate priv | |
|
56
|
CVE-2026-69681 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an | |
|
56
|
CVE-2026-69689 |
8.0 | 0.0077 | NET LOW CX | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate pr | |
|
56
|
CVE-2026-69717 |
8.0 | 0.0077 | NET LOW CX | Untrusted pointer dereference in Windows Group Policy allows an authorized attac | |
|
56
|
CVE-2026-69762 |
8.0 | 0.0077 | NET LOW CX | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to e | |
|
56
|
CVE-2026-69875 |
8.0 | 0.0077 | NET LOW CX | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev | |
|
56
|
CVE-2026-46394 |
7.7 | 0.0077 | NET NO UI | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to ve |