Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,280
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-5276—99.8%
——30——CVE-2024-7954—99.8%
——30——CVE-2020-11984—99.8%
——30——CVE-2025-1094—99.8%
——30——CVE-2017-8464—99.8%
KEV—80Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability—CVE-2012-1426—99.8%
——30——CVE-2023-36844—99.8%
KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2019-12725—99.8%
——30——CVE-2012-1439—99.8%
——30——CVE-2012-1445—99.8%
——30——CVE-2017-3599—99.8%
——30——CVE-2023-47218—99.8%
——30——CVE-2020-17132—99.8%
——30——CVE-2017-8570—99.8%
KEV—80Microsoft Office Remote Code Execution Vulnerability—CVE-2015-3829—99.8%
——30——CVE-2017-0146—99.8%
KEVR80Microsoft Windows SMB Remote Code Execution Vulnerability—CVE-2022-44268—99.8%
——30——CVE-2017-01458.8 HIG99.8%
KEVR80Microsoft SMBv1 Remote Code Execution Vulnerability68dCVE-2002-0656—99.8%
——30——CVE-2013-2333—99.8%
——30——CVE-2023-251366.5 MED99.8%
——30OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."6dCVE-2017-56459.8 CRI99.8%
——30In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.12dCVE-2020-8604—99.8%
——30——CVE-2019-20501—99.8%
——30——CVE-2023-6909—99.8%
——30——CVE-2012-1423—99.8%
——30——CVE-2020-17463—99.8%
KEV—80Fuel CMS SQL Injection Vulnerability—CVE-2019-7195—99.8%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2018-7358—99.8%
——30——CVE-2024-37032—99.8%
——30——CVE-2019-17621—99.8%
KEV—80D-Link DIR-859 Router Command Execution Vulnerability—CVE-2018-159827.8 HIG99.8%
KEVR80Adobe Flash Player Use-After-Free Vulnerability19dCVE-2026-630779.8 CRI99.8%
KEVR80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability76dCVE-2018-4878—99.8%
KEVR80Adobe Flash Player Use-After-Free Vulnerability—CVE-2022-30522—99.8%
——30——CVE-2023-27253—99.8%
——30——CVE-2011-3923—99.8%
——30——CVE-2016-2776—99.8%
——30——CVE-2020-0601—99.8%
KEV—80Microsoft Windows CryptoAPI Spoofing Vulnerability—CVE-2024-1071—99.8%
——30——