Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,280
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-21509—99.4%
KEV—80Microsoft Office Security Feature Bypass Vulnerability—CVE-2013-3163—99.4%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2021-21220—99.4%
KEV—80Google Chromium V8 Improper Input Validation Vulnerability—CVE-2020-36193—99.4%
KEV—80PEAR Archive_Tar Improper Link Resolution Vulnerability—CVE-2022-28810—99.4%
KEV—80Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability—CVE-2024-203538.6 HIG99.4%
KEV—80Cisco ASA and FTD Denial of Service Vulnerability70dCVE-2025-203339.9 CRI99.4%
KEV—80Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability2dCVE-2022-22948.8 HIG99.4%
KEVR80WebRTC Heap Buffer Overflow Vulnerability78dCVE-2018-84537.8 HIG99.4%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability69dCVE-2020-4427—99.4%
KEV—80IBM Data Risk Manager Security Bypass Vulnerability—CVE-2017-6736—99.4%
KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2012-1535—99.4%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2026-550409.1 CRI99.4%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability63dCVE-2016-0185—99.4%
KEV—80Microsoft Windows Media Center Remote Code Execution Vulnerability—CVE-2016-00348.8 HIG99.4%
KEVR80Microsoft Silverlight Runtime Remote Code Execution Vulnerability68dCVE-2021-44026—99.4%
KEV—80Roundcube Webmail SQL Injection Vulnerability—CVE-2020-0938—99.3%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2024-300887.0 HIG99.3%
KEVR80Microsoft Windows Kernel TOCTOU Race Condition Vulnerability78dCVE-2013-1690—99.3%
KEV—80Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability—CVE-2020-4430—99.3%
KEV—80IBM Data Risk Manager Directory Traversal Vulnerability—CVE-2016-11021—99.3%
KEV—80D-Link DCS-930L Devices OS Command Injection Vulnerability—CVE-2017-6077—99.3%
KEV—80NETGEAR DGN2200 Remote Code Execution Vulnerability—CVE-2016-3393—99.3%
KEV—80Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability—CVE-2023-284619.8 CRI99.3%
KEVR80Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability77dCVE-2013-3896—99.3%
KEV—80Microsoft Silverlight Information Disclosure Vulnerability—CVE-2025-59718—99.3%
KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2021-30657—99.3%
KEV—80Apple macOS Unspecified Vulnerability—CVE-2019-18426—99.3%
KEV—80WhatsApp Cross-Site Scripting Vulnerability—CVE-2015-4495—99.3%
KEV—80Mozilla Firefox Security Feature Bypass Vulnerability—CVE-2024-43572—99.3%
KEV—80Microsoft Windows Management Console Remote Code Execution Vulnerability—CVE-2015-8651—99.3%
KEV—80Adobe Flash Player Integer Overflow Vulnerability—CVE-2025-0411—99.3%
KEV—807-Zip Mark of the Web Bypass Vulnerability—CVE-2022-34713—99.3%
KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2016-4657—99.3%
KEV—80Apple iOS Webkit Memory Corruption Vulnerability—CVE-2009-0556—99.3%
KEV—80Microsoft Office PowerPoint Code Injection Vulnerability—CVE-2024-57726—99.3%
KEVR80SimpleHelp Missing Authorization Vulnerability—CVE-2021-369347.8 HIG99.3%
KEV—80Microsoft Windows SAM Local Privilege Escalation Vulnerability71dCVE-2016-20017—99.3%
KEV—80D-Link DSL-2750B Devices Command Injection Vulnerability—CVE-2013-0631—99.3%
KEV—80Adobe ColdFusion Information Disclosure Vulnerability—CVE-2021-369427.5 HIG99.3%
KEVR80Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability71d