Vulnerabilities exploitable today
399,240in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2014-1761—99.6%
KEV—80Microsoft Word Memory Corruption Vulnerability—CVE-2013-1347—99.6%
KEV—80Microsoft Internet Explorer Remote Code Execution Vulnerability—CVE-2020-8816—99.6%
KEV—80Pi-Hole AdminLTE Remote Code Execution Vulnerability—CVE-2023-24880—99.6%
KEVR80Microsoft Windows SmartScreen Security Feature Bypass Vulnerability—CVE-2023-273517.5 HIG99.6%
KEVR80PaperCut NG/MF Improper Authentication Vulnerability19dCVE-2019-1429—99.6%
KEV—80Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2014-6352—99.6%
KEV—80Microsoft Windows Code Injection Vulnerability—CVE-2021-422877.5 HIG99.6%
KEVR80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability62dCVE-2011-3402—99.6%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2017-0261—99.6%
KEV—80Microsoft Office Use-After-Free Vulnerability—CVE-2023-49103—99.6%
KEV—80ownCloud graphapi Information Disclosure Vulnerability—CVE-2026-80379.6 CRI99.6%
KEV—80Progress LoadMaster Command Injection Vulnerability5dCVE-2021-28799—99.6%
KEVR80QNAP NAS Improper Authorization Vulnerability—CVE-2022-26318—99.6%
KEV—80WatchGuard Firebox and XTM Appliances Arbitrary Code Execution—CVE-2020-10221—99.6%
KEV—80rConfig OS Command Injection Vulnerability—CVE-2013-3897—99.6%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2021-17327.8 HIG99.6%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability70dCVE-2026-162329.8 CRI99.6%
KEV—80Check Point SmartConsole Improper Authentication Vulnerability71dCVE-2017-113579.8 CRI99.6%
KEVR80Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability68dCVE-2019-15949—99.5%
KEV—80Nagios XI Remote Code Execution Vulnerability—CVE-2012-0391—99.5%
KEV—80Apache Struts 2 Improper Input Validation Vulnerability—CVE-2021-38406—99.5%
KEV—80Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability—CVE-2021-30860—99.5%
KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2023-44221—99.5%
KEV—80SonicWall SMA100 Appliances OS Command Injection Vulnerability—CVE-2023-5631—99.5%
KEV—80Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability—CVE-2008-0015—99.5%
KEV—80 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability—CVE-2015-0016—99.5%
KEV—80Microsoft Windows TS WebProxy Directory Traversal Vulnerability—CVE-2020-13965—99.5%
KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2026-936169.8 CRI99.5%
KEV—80Check Point Multiple Products Path Traversal Vulnerability27dCVE-2022-44698—99.5%
KEVR80Microsoft Defender SmartScreen Security Feature Bypass Vulnerability—CVE-2026-250899.8 CRI99.5%
KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability90dCVE-2019-7238—99.5%
KEV—80Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability—CVE-2016-3718—99.5%
KEV—80ImageMagick Server-Side Request Forgery (SSRF) Vulnerability—CVE-2018-15811—99.5%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2018-15133—99.5%
KEV—80Laravel Deserialization of Untrusted Data Vulnerability—CVE-2016-3715—99.5%
KEV—80ImageMagick Arbitrary File Deletion Vulnerability—CVE-2010-07385.3 MED99.5%
KEVR80Red Hat JBoss Authentication Bypass Vulnerability18dCVE-2019-12991—99.5%
KEV—80Citrix SD-WAN and NetScaler Command Injection Vulnerability—CVE-2019-1003029—99.5%
KEV—80Jenkins Script Security Plugin Sandbox Bypass Vulnerability—CVE-2018-14667—99.5%
KEV—80Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability—