Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-6205—99.4%
KEV—80Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability—CVE-2018-0824—99.4%
KEV—80Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability—CVE-2018-7841—99.4%
KEV—80Schneider Electric U.motion Builder SQL Injection Vulnerability—CVE-2019-2215—99.4%
KEV—80Android Kernel Use-After-Free Vulnerability—CVE-2012-1856—99.4%
KEV—80Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability—CVE-2020-32597.5 HIG99.4%
KEVR80Cisco ASA and FTD Information Disclosure Vulnerability19dCVE-2022-28810—99.4%
KEV—80Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability—CVE-2026-42897—99.4%
KEV—80Microsoft Exchange Server Cross-Site Scripting Vulnerability—CVE-2010-4344—99.4%
KEV—80Exim Heap-Based Buffer Overflow Vulnerability—CVE-2017-8540—99.4%
KEV—80Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability—CVE-2015-4495—99.4%
KEV—80Mozilla Firefox Security Feature Bypass Vulnerability—CVE-2016-2386—99.4%
KEV—80SAP NetWeaver SQL Injection Vulnerability—CVE-2012-1535—99.3%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2017-6736—99.3%
KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2025-30066—99.3%
KEV—80tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability—CVE-2022-22948.8 HIG99.3%
KEVR80WebRTC Heap Buffer Overflow Vulnerability27dCVE-2013-3163—99.3%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2016-0185—99.3%
KEV—80Microsoft Windows Media Center Remote Code Execution Vulnerability—CVE-2025-203339.9 CRI99.3%
KEV—80Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability20dCVE-2020-4427—99.3%
KEV—80IBM Data Risk Manager Security Bypass Vulnerability—CVE-2018-84537.8 HIG99.3%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability18dCVE-2021-21220—99.3%
KEV—80Google Chromium V8 Improper Input Validation Vulnerability—CVE-2020-36193—99.3%
KEV—80PEAR Archive_Tar Improper Link Resolution Vulnerability—CVE-2024-203538.6 HIG99.3%
KEV—80Cisco ASA and FTD Denial of Service Vulnerability20dCVE-2013-3896—99.3%
KEV—80Microsoft Silverlight Information Disclosure Vulnerability—CVE-2020-4430—99.3%
KEV—80IBM Data Risk Manager Directory Traversal Vulnerability—CVE-2021-30657—99.3%
KEV—80Apple macOS Unspecified Vulnerability—CVE-2016-00348.8 HIG99.3%
KEVR80Microsoft Silverlight Runtime Remote Code Execution Vulnerability17dCVE-2025-59718—99.3%
KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2020-0938—99.3%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2016-11021—99.3%
KEV—80D-Link DCS-930L Devices OS Command Injection Vulnerability—CVE-2016-3393—99.3%
KEV—80Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability—CVE-2013-1690—99.3%
KEV—80Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability—CVE-2017-6077—99.3%
KEV—80NETGEAR DGN2200 Remote Code Execution Vulnerability—CVE-2023-284619.8 CRI99.3%
KEVR80Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability26dCVE-2019-18426—99.3%
KEV—80WhatsApp Cross-Site Scripting Vulnerability—CVE-2015-8651—99.3%
KEV—80Adobe Flash Player Integer Overflow Vulnerability—CVE-2009-0556—99.3%
KEV—80Microsoft Office PowerPoint Code Injection Vulnerability—CVE-2022-34713—99.3%
KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2015-7645—99.3%
KEVR80Adobe Flash Player Arbitrary Code Execution Vulnerability—