Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2013-3906—99.7%
KEV—80Microsoft Graphics Component Memory Corruption Vulnerability—CVE-2023-36847—99.7%
KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2025-52691—99.7%
KEVR80SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability—CVE-2020-39929.8 CRI99.7%
KEVR80VMware ESXi OpenSLP Use-After-Free Vulnerability19dCVE-2021-237588.1 HIG99.7%
KEV—80Ajax.NET Professional Deserialization of Untrusted Data Vulnerability4dCVE-2017-0213—99.7%
KEVR80Microsoft Windows Privilege Escalation Vulnerability—CVE-2020-7796—99.7%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability—CVE-2024-217629.8 CRI99.7%
KEVR80Fortinet FortiOS Out-of-Bound Write Vulnerability27dCVE-2020-11023—99.7%
KEV—80JQuery Cross-Site Scripting (XSS) Vulnerability—CVE-2022-26923—99.7%
KEV—80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability—CVE-2017-11317—99.7%
KEV—80Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability—CVE-2024-43451—99.7%
KEV—80Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability—CVE-2020-15415—99.7%
KEV—80DrayTek Multiple Vigor Routers OS Command Injection Vulnerability—CVE-2025-342918.8 HIG99.7%
KEV—80Langflow Origin Validation Error Vulnerability48dCVE-2019-7194—99.7%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2016-5195—99.7%
KEV—80Linux Kernel Race Condition Vulnerability—CVE-2022-24990—99.7%
KEVR80TerraMaster OS Remote Command Execution Vulnerability—CVE-2012-1889—99.7%
KEV—80Microsoft XML Core Services Memory Corruption Vulnerability—CVE-2026-507519.3 CRI99.7%
KEVR80Check Point Security Gateway Improper Authentication Vulnerability27dCVE-2020-12641—99.7%
KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2019-9874—99.7%
KEV—80Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability—CVE-2010-3765—99.7%
KEV—80Mozilla Multiple Products Remote Code Execution Vulnerability—CVE-2023-27992—99.7%
KEV—80Zyxel Multiple NAS Devices Command Injection Vulnerability—CVE-2020-3161—99.7%
KEV—80Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability—CVE-2026-1540910.0 CRI99.7%
KEVR80SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability46dCVE-2021-21224—99.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2021-200219.8 CRI99.7%
KEVR80SonicWall Email Security Improper Privilege Management Vulnerability19dCVE-2025-40551—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2016-10174—99.7%
KEV—80NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability—CVE-2020-5722—99.7%
KEV—80Grandstream Networks UCM6200 Series SQL Injection Vulnerability—CVE-2010-1871—99.7%
KEV—80Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability—CVE-2024-38112—99.7%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2026-422718.8 HIG99.7%
KEV—80BerriAI LiteLLM Command Injection Vulnerability48dCVE-2019-0193—99.7%
KEV—80Apache Solr DataImportHandler Code Injection Vulnerability—CVE-2015-3035—99.7%
KEV—80TP-Link Multiple Archer Devices Directory Traversal Vulnerability—CVE-2025-14847—99.7%
KEV—80MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability—CVE-2009-3953—99.7%
KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—CVE-2023-28432—99.7%
KEV—80MinIO Information Disclosure Vulnerability—CVE-2025-8110—99.6%
KEV—80Gogs Path Traversal Vulnerability—CVE-2010-2883—99.6%
KEV—80Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability—