Vulnerabilities exploitable today
399,240in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2016-5195—99.7%
KEV—80Linux Kernel Race Condition Vulnerability—CVE-2020-28949—99.7%
KEV—80PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability—CVE-2023-412668.2 HIG99.7%
KEVR80Qlik Sense Path Traversal Vulnerability77dCVE-2024-28986—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2020-3161—99.7%
KEV—80Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability—CVE-2020-15415—99.7%
KEV—80DrayTek Multiple Vigor Routers OS Command Injection Vulnerability—CVE-2017-11317—99.7%
KEV—80Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability—CVE-2020-5722—99.7%
KEV—80Grandstream Networks UCM6200 Series SQL Injection Vulnerability—CVE-2019-9874—99.7%
KEV—80Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability—CVE-2024-38112—99.7%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2021-21224—99.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2020-7796—99.7%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability—CVE-2023-24955—99.7%
KEVR80Microsoft SharePoint Server Code Injection Vulnerability—CVE-2013-3906—99.7%
KEV—80Microsoft Graphics Component Memory Corruption Vulnerability—CVE-2025-64328—99.7%
KEV—80Sangoma FreePBX OS Command Injection Vulnerability—CVE-2012-1889—99.7%
KEV—80Microsoft XML Core Services Memory Corruption Vulnerability—CVE-2017-0213—99.7%
KEVR80Microsoft Windows Privilege Escalation Vulnerability—CVE-2025-40551—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2014-0322—99.7%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2019-10758—99.7%
KEV—80MongoDB mongo-express Remote Code Execution Vulnerability—CVE-2019-11581—99.7%
KEV—80Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability—CVE-2015-3035—99.7%
KEV—80TP-Link Multiple Archer Devices Directory Traversal Vulnerability—CVE-2010-0806—99.7%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2023-27992—99.7%
KEV—80Zyxel Multiple NAS Devices Command Injection Vulnerability—CVE-2025-33073—99.7%
KEV—80Microsoft Windows SMB Client Improper Access Control Vulnerability—CVE-2024-217629.8 CRI99.7%
KEVR80Fortinet FortiOS Out-of-Bound Write Vulnerability78dCVE-2024-42009—99.7%
KEV—80RoundCube Webmail Cross-Site Scripting Vulnerability—CVE-2018-6789—99.7%
KEVR80Exim Buffer Overflow Vulnerability—CVE-2021-237588.1 HIG99.7%
KEV—80Ajax.NET Professional Deserialization of Untrusted Data Vulnerability55dCVE-2023-43208—99.7%
KEVR80NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability—CVE-2010-1297—99.7%
KEV—80Adobe Flash Player Memory Corruption Vulnerability—CVE-2025-14847—99.7%
KEV—80MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability—CVE-2009-3953—99.7%
KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—CVE-2022-24990—99.7%
KEVR80TerraMaster OS Remote Command Execution Vulnerability—CVE-2024-0769—99.7%
KEV—80 D-Link DIR-859 Router Path Traversal Vulnerability—CVE-2023-36847—99.7%
KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2016-7200—99.7%
KEV—80Microsoft Edge Memory Corruption Vulnerability—CVE-2019-7194—99.7%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2014-1776—99.7%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2016-10174—99.7%
KEV—80NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability—