Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-284619.8 CRI99.3%
KEVR80Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability26dCVE-2016-4657—99.2%
KEV—80Apple iOS Webkit Memory Corruption Vulnerability—CVE-2025-0411—99.2%
KEV—807-Zip Mark of the Web Bypass Vulnerability—CVE-2024-43572—99.2%
KEV—80Microsoft Windows Management Console Remote Code Execution Vulnerability—CVE-2025-20337—99.2%
KEV—80Cisco Identity Services Engine Injection Vulnerability—CVE-2013-2729—99.2%
KEV—80Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability—CVE-2021-369347.8 HIG99.2%
KEV—80Microsoft Windows SAM Local Privilege Escalation Vulnerability21dCVE-2024-57726—99.2%
KEVR80SimpleHelp Missing Authorization Vulnerability—CVE-2011-0609—99.2%
KEV—80Adobe Flash Player Unspecified Vulnerability—CVE-2021-369427.5 HIG99.2%
KEVR80Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability21dCVE-2016-20017—99.2%
KEV—80D-Link DSL-2750B Devices Command Injection Vulnerability—CVE-2020-1020—99.2%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2013-0629—99.2%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability—CVE-2025-58360—99.2%
KEV—80OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability—CVE-2023-29552—99.2%
KEV—80Service Location Protocol (SLP) Denial-of-Service Vulnerability—CVE-2021-27877—99.2%
KEVR80Veritas Backup Exec Agent Improper Authentication Vulnerability—CVE-2013-0631—99.2%
KEV—80Adobe ColdFusion Information Disclosure Vulnerability—CVE-2019-0211—99.2%
KEV—80Apache HTTP Server Privilege Escalation Vulnerability—CVE-2014-1812—99.2%
KEVR80Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability—CVE-2016-7256—99.2%
KEV—80Microsoft Windows Open Type Font Remote Code Execution Vulnerability—CVE-2023-35081—99.2%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability—CVE-2021-30632—99.2%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2026-3490910.0 CRI99.2%
KEV—80Ubiquiti UniFi OS Path Traversal Vulnerability39dCVE-2021-30551—99.2%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2021-22681—99.2%
KEV—80Rockwell Multiple Products Insufficient Protected Credentials Vulnerability—CVE-2025-2776—99.2%
KEV—80SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability—CVE-2015-4068—99.2%
KEV—80Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability—CVE-2026-322024.3 MED99.2%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17dCVE-2010-2572—99.1%
KEV—80Microsoft PowerPoint Buffer Overflow Vulnerability—CVE-2022-21445—99.1%
KEV—80Oracle ADF Faces Deserialization of Untrusted Data Vulnerability—CVE-2018-4939—99.1%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2026-07709.8 CRI99.1%
KEV—80Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability40dCVE-2016-0151—99.1%
KEVR80Microsoft Windows CSRSS Security Feature Bypass Vulnerability—CVE-2009-0563—99.1%
KEV—80Microsoft Office Buffer Overflow Vulnerability—CVE-2024-9380—99.1%
KEV—80Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability—CVE-2010-14287.5 HIG99.1%
KEVR80Red Hat JBoss Information Disclosure Vulnerability17dCVE-2026-454984.0 MED99.1%
KEV—80Microsoft Defender Denial of Service Vulnerability39dCVE-2019-8394—99.1%
KEV—80Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability—CVE-2019-5786—99.1%
KEV—80Google Chrome Blink Use-After-Free Vulnerability—CVE-2024-54085—99.1%
KEV—80AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability—