Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,441
- High15,704
- Medium14,721
- Low1,446
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-2894—98.9%
——30——CVE-2009-4655—98.9%
——30——CVE-2024-48307—98.9%
——30——CVE-2019-20224—98.9%
——30——CVE-2024-33610—98.9%
——30——CVE-2021-213425.3 MED98.9%
——30XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.14dCVE-2021-26414—98.9%
——30——CVE-2016-3304—98.9%
——30——CVE-2022-37109—98.9%
——30——CVE-2013-4784—98.9%
——30——CVE-2016-33137.8 HIG98.9%
——30Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."6dCVE-2013-3563—98.9%
——30——CVE-2020-36239—98.9%
——30——CVE-2017-14098—98.9%
——30——CVE-2007-6016—98.9%
——30——CVE-2025-49002—98.9%
——30——CVE-2007-4336—98.9%
——30——CVE-2017-14535—98.9%
——30——CVE-2011-0593—98.9%
——30——CVE-2010-0904—98.9%
——30——CVE-2018-8823—98.9%
——30——CVE-2010-0477—98.9%
——30——CVE-2004-1135—98.9%
——30——CVE-2026-239188.8 HIG98.9%
——30Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.
This issue affects Apache HTTP Server: 2.4.66.
Users are recommended to upgrade to version 2.4.67, which fixes the issue.99dCVE-2007-2386—98.9%
——30——CVE-2016-6909—98.9%
——30——CVE-2024-56511—98.9%
——30——CVE-2015-5133—98.9%
——30——CVE-2021-39840—98.9%
——30——CVE-2018-16159—98.9%
——30——CVE-2018-8133—98.9%
——30——CVE-2021-40493—98.9%
——30——CVE-2001-1410—98.9%
——30——CVE-2015-5132—98.9%
——30——CVE-2002-0150—98.9%
——30——CVE-2012-2336—98.9%
——30——CVE-2021-33035—98.9%
——30——CVE-2021-23840—98.9%
——30——CVE-2005-0174—98.9%
——30——CVE-2013-1884—98.9%
——30——