Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-0016—99.5%
KEV—80Microsoft Windows TS WebProxy Directory Traversal Vulnerability—CVE-2021-30860—99.5%
KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2016-3715—99.5%
KEV—80ImageMagick Arbitrary File Deletion Vulnerability—CVE-2018-8298—99.5%
KEV—80ChakraCore Scripting Engine Type Confusion Vulnerability—CVE-2021-252988.8 HIG99.5%
KEV—80Nagios XI OS Command Injection53dCVE-2014-0780—99.5%
KEV—80InduSoft Web Studio NTWebServer Directory Traversal Vulnerability—CVE-2015-3043—99.5%
KEV—80Adobe Flash Player Memory Corruption Vulnerability—CVE-2017-8543—99.5%
KEV—80Microsoft Windows Search Remote Code Execution Vulnerability—CVE-2019-14587.8 HIG99.5%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability19dCVE-2025-1316—99.5%
KEV—80Edimax IC-7100 IP Camera OS Command Injection Vulnerability—CVE-2017-9248—99.5%
KEV—80Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability—CVE-2012-0391—99.5%
KEV—80Apache Struts 2 Improper Input Validation Vulnerability—CVE-2021-42258—99.5%
KEVR80BQE BillQuick Web Suite SQL Injection Vulnerability—CVE-2023-44221—99.5%
KEV—80SonicWall SMA100 Appliances OS Command Injection Vulnerability—CVE-2018-8414—99.4%
KEV—80Microsoft Windows Shell Remote Code Execution Vulnerability—CVE-2018-81207.0 HIG99.4%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability18dCVE-2013-3918—99.4%
KEV—80Microsoft Windows Out-of-Bounds Write Vulnerability—CVE-2018-14667—99.4%
KEV—80Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability—CVE-2023-47565—99.4%
KEV—80QNAP VioStor NVR OS Command Injection Vulnerability—CVE-2019-1003029—99.4%
KEV—80Jenkins Script Security Plugin Sandbox Bypass Vulnerability—CVE-2005-2773—99.4%
KEV—80HP OpenView Network Node Manager Remote Code Execution Vulnerability—CVE-2018-15811—99.4%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2013-2551—99.4%
KEVR80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2019-12991—99.4%
KEV—80Citrix SD-WAN and NetScaler Command Injection Vulnerability—CVE-2024-37383—99.4%
KEV—80RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2021-40449—99.4%
KEVR80Microsoft Windows Win32k Privilege Escalation Vulnerability—CVE-2024-21182—99.4%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2018-18325—99.4%
KEV—80DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability—CVE-2022-20699—99.4%
KEV—80Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability—CVE-2019-1429—99.4%
KEV—80Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2018-0824—99.4%
KEV—80Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability—CVE-2026-21509—99.4%
KEV—80Microsoft Office Security Feature Bypass Vulnerability—CVE-2021-422787.5 HIG99.4%
KEVR80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability12dCVE-2018-7841—99.4%
KEV—80Schneider Electric U.motion Builder SQL Injection Vulnerability—CVE-2020-5741—99.4%
KEV—80Plex Media Server Remote Code Execution Vulnerability—CVE-2021-252968.8 HIG99.4%
KEV—80Nagios XI OS Command Injection53dCVE-2026-338249.8 CRI99.4%
KEV—80Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability12dCVE-2026-162329.8 CRI99.4%
KEV—80Check Point SmartConsole Improper Authentication Vulnerability21dCVE-2019-2215—99.4%
KEV—80Android Kernel Use-After-Free Vulnerability—CVE-2012-1856—99.4%
KEV—80Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability—