Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,280
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2015-7645—99.3%
KEVR80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2025-31125—99.3%
KEV—80Vite Vitejs Improper Access Control Vulnerability—CVE-2013-2729—99.3%
KEV—80Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability—CVE-2013-0629—99.3%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability—CVE-2019-0211—99.2%
KEV—80Apache HTTP Server Privilege Escalation Vulnerability—CVE-2014-1812—99.2%
KEVR80Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability—CVE-2024-57728—99.2%
KEVR80SimpleHelp Path Traversal Vulnerability—CVE-2016-7256—99.2%
KEV—80Microsoft Windows Open Type Font Remote Code Execution Vulnerability—CVE-2023-29552—99.2%
KEV—80Service Location Protocol (SLP) Denial-of-Service Vulnerability—CVE-2021-30551—99.2%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2020-1020—99.2%
KEV—80Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability—CVE-2025-2776—99.2%
KEV—80SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability—CVE-2020-15999—99.2%
KEV—80Google Chrome FreeType Heap Buffer Overflow Vulnerability—CVE-2023-49117.8 HIG99.2%
KEV—80GNU C Library Buffer Overflow Vulnerability6dCVE-2021-27877—99.2%
KEVR80Veritas Backup Exec Agent Improper Authentication Vulnerability—CVE-2025-47813—99.2%
KEV—80Wing FTP Server Information Disclosure Vulnerability—CVE-2026-820789.1 CRI99.2%
KEV—80PaperCut NG/MF Unsafe Reflection Vulnerability37dCVE-2026-07709.8 CRI99.2%
KEV—80Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability91dCVE-2015-4068—99.2%
KEV—80Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability—CVE-2023-35081—99.2%
KEV—80Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability—CVE-2021-30632—99.2%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2021-22681—99.2%
KEV—80Rockwell Multiple Products Insufficient Protected Credentials Vulnerability—CVE-2011-0609—99.2%
KEV—80Adobe Flash Player Unspecified Vulnerability—CVE-2009-0563—99.2%
KEV—80Microsoft Office Buffer Overflow Vulnerability—CVE-2016-0151—99.2%
KEVR80Microsoft Windows CSRSS Security Feature Bypass Vulnerability—CVE-2023-43770—99.2%
KEV—80Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability—CVE-2019-8394—99.2%
KEV—80Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability—CVE-2025-625938.8 HIG99.2%
KEV—80Ray-Project Ray Code Injection Vulnerability1dCVE-2010-14287.5 HIG99.2%
KEVR80Red Hat JBoss Information Disclosure Vulnerability18dCVE-2024-23113—99.2%
KEV—80Fortinet Multiple Products Format String Vulnerability—CVE-2020-4428—99.2%
KEV—80IBM Data Risk Manager Remote Code Execution Vulnerability—CVE-2018-4939—99.2%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2019-5786—99.2%
KEV—80Google Chrome Blink Use-After-Free Vulnerability—CVE-2022-21445—99.2%
KEV—80Oracle ADF Faces Deserialization of Untrusted Data Vulnerability—CVE-2021-22991—99.2%
KEV—80F5 BIG-IP Traffic Management Microkernel Buffer Overflow—CVE-2017-0059—99.2%
KEV—80Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2015-7755—99.2%
KEV—80Juniper ScreenOS Improper Authentication Vulnerability—CVE-2018-8373—99.2%
KEV—80Microsoft Scripting Engine Memory Corruption Vulnerability—CVE-2025-24054—99.2%
KEV—80Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability—CVE-2024-213387.8 HIG99.1%
KEVR80Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability71d