Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-203626.5 MED99.7%
KEV—80Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability20dCVE-2016-9079—99.7%
KEV—80Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability—CVE-2019-4716—99.7%
KEV—80IBM Planning Analytics Remote Code Execution Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2016-6415—99.7%
KEV—80Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability—CVE-2021-40655—99.7%
KEV—80D-Link DIR-605 Router Information Disclosure Vulnerability—CVE-2026-630779.8 CRI99.7%
KEV—80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability25dCVE-2025-4428—99.7%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2023-2868—99.7%
KEV—80Barracuda Networks ESG Appliance Improper Input Validation Vulnerability—CVE-2013-0640—99.7%
KEV—80Adobe Reader and Acrobat Memory Corruption Vulnerability—CVE-2026-244239.8 CRI99.7%
KEVR80SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability27dCVE-2020-17496—99.7%
KEV—80vBulletin PHP Module Remote Code Execution Vulnerability—CVE-2023-24955—99.7%
KEVR80Microsoft SharePoint Server Code Injection Vulnerability—CVE-2024-28986—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2019-10758—99.7%
KEV—80MongoDB mongo-express Remote Code Execution Vulnerability—CVE-2013-3893—99.7%
KEV—80Microsoft Internet Explorer Resource Management Errors Vulnerability—CVE-2026-600049.8 CRI99.7%
KEV—80Gitea Code Injection Vulnerability4dCVE-2020-28949—99.7%
KEV—80PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability—CVE-2015-2545—99.7%
KEV—80Microsoft Office Malformed EPS File Vulnerability—CVE-2014-0322—99.7%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2022-23134—99.7%
KEV—80Zabbix Frontend Improper Access Control Vulnerability—CVE-2024-58136—99.7%
KEV—80Yiiframework Yii Improper Protection of Alternate Path Vulnerability—CVE-2026-24858—99.7%
KEV—80Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2025-64328—99.7%
KEV—80Sangoma FreePBX OS Command Injection Vulnerability—CVE-2026-3490810.0 CRI99.7%
KEV—80Ubiquiti UniFi OS Improper Access Control Vulnerability39dCVE-2023-36847—99.7%
KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2018-17463—99.7%
KEV—80Google Chromium V8 Remote Code Execution Vulnerability—CVE-2019-11581—99.7%
KEV—80Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability—CVE-2023-412668.2 HIG99.7%
KEVR80Qlik Sense Path Traversal Vulnerability26dCVE-2021-16757.8 HIG99.7%
KEVR80Microsoft Windows Print Spooler Remote Code Execution Vulnerability19dCVE-2023-389507.5 HIG99.7%
KEV—80ZKTeco BioTime Path Traversal Vulnerability53dCVE-2013-2423—99.7%
KEV—80Oracle JRE Unspecified Vulnerability—CVE-2021-3011610.0 CRI99.7%
KEVR80Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability17dCVE-2015-0311—99.7%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2025-52691—99.7%
KEVR80SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability—CVE-2026-505229.8 CRI99.7%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 39dCVE-2025-33053—99.7%
KEV—80 Microsoft Windows External Control of File Name or Path Vulnerability—CVE-2022-279247.5 HIG99.7%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability27dCVE-2009-3129—99.7%
KEV—80Microsoft Excel Featheader Record Memory Corruption Vulnerability—CVE-2020-35806.1 MED99.7%
KEVR80Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability20d