Vulnerabilities exploitable today
349,195in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,298
- High4,252
- Medium3,575
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-30088—99.3%
KEVR80Microsoft Windows Kernel TOCTOU Race Condition Vulnerability—CVE-2013-1690—99.3%
KEV—80Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability—CVE-2016-3393—99.3%
KEV—80Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability—CVE-2021-30657—99.3%
KEV—80Apple macOS Unspecified Vulnerability—CVE-2021-20124—99.3%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2017-6077—99.3%
KEV—80NETGEAR DGN2200 Remote Code Execution Vulnerability—CVE-2020-0938—99.3%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2020-4430—99.3%
KEV—80IBM Data Risk Manager Directory Traversal Vulnerability—CVE-2025-0411—99.2%
KEV—807-Zip Mark of the Web Bypass Vulnerability—CVE-2022-34713—99.2%
KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2019-18426—99.2%
KEV—80WhatsApp Cross-Site Scripting Vulnerability—CVE-2009-0556—99.2%
KEV—80Microsoft Office PowerPoint Code Injection Vulnerability—CVE-2015-8651—99.2%
KEV—80Adobe Flash Player Integer Overflow Vulnerability—CVE-2021-36934—99.2%
KEV—80Microsoft Windows SAM Local Privilege Escalation Vulnerability—CVE-2023-28461—99.2%
KEVR80Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability—CVE-2025-58360—99.2%
KEV—80OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability—CVE-2013-2729—99.2%
KEV—80Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability—CVE-2013-0629—99.2%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability—CVE-2023-29552—99.2%
KEV—80Service Location Protocol (SLP) Denial-of-Service Vulnerability—CVE-2025-59718—99.2%
KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2011-0609—99.2%
KEV—80Adobe Flash Player Unspecified Vulnerability—CVE-2016-4657—99.2%
KEV—80Apple iOS Webkit Memory Corruption Vulnerability—CVE-2024-43572—99.2%
KEV—80Microsoft Windows Management Console Remote Code Execution Vulnerability—CVE-2013-0631—99.2%
KEV—80Adobe ColdFusion Information Disclosure Vulnerability—CVE-2021-36942—99.2%
KEVR80Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability—CVE-2016-7256—99.2%
KEV—80Microsoft Windows Open Type Font Remote Code Execution Vulnerability—CVE-2019-0211—99.2%
KEV—80Apache HTTP Server Privilege Escalation Vulnerability—CVE-2021-30632—99.2%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2020-1020—99.2%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2025-33073—99.2%
KEV—80Microsoft Windows SMB Client Improper Access Control Vulnerability—CVE-2025-20337—99.2%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2014-1812—99.2%
KEVR80Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability—CVE-2021-27877—99.2%
KEVR80Veritas Backup Exec Agent Improper Authentication Vulnerability—CVE-2021-30551—99.2%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2023-35081—99.1%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability—CVE-2015-4068—99.1%
KEV—80Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability—CVE-2019-8394—99.1%
KEV—80Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability—CVE-2026-32202—99.1%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability—CVE-2025-11953—99.1%
KEV—80React Native Community CLI OS Command Injection Vulnerability—CVE-2010-1428—99.1%
KEVR80Red Hat JBoss Information Disclosure Vulnerability—