Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-7445—99.1%
KEV—80MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability—CVE-2019-5786—99.1%
KEV—80Google Chrome Blink Use-After-Free Vulnerability—CVE-2021-22991—99.1%
KEV—80F5 BIG-IP Traffic Management Microkernel Buffer Overflow—CVE-2023-21608—99.1%
KEV—80Adobe Acrobat and Reader Use-After-Free Vulnerability—CVE-2024-23113—99.1%
KEV—80Fortinet Multiple Products Format String Vulnerability—CVE-2023-215298.8 HIG99.1%
KEVR80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability12dCVE-2017-0059—99.1%
KEV—80Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2020-4428—99.1%
KEV—80IBM Data Risk Manager Remote Code Execution Vulnerability—CVE-2024-54085—99.1%
KEV—80AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability—CVE-2015-7755—99.1%
KEV—80Juniper ScreenOS Improper Authentication Vulnerability—CVE-2017-11774—99.1%
KEV—80Microsoft Office Outlook Security Feature Bypass Vulnerability—CVE-2024-213387.8 HIG99.1%
KEVR80Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability21dCVE-2014-4148—99.1%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2018-6065—99.1%
KEV—80Google Chromium V8 Integer Overflow Vulnerability—CVE-2020-8655—99.1%
KEV—80EyesOfNetwork Improper Privilege Management Vulnerability—CVE-2025-47813—99.1%
KEV—80Wing FTP Server Information Disclosure Vulnerability—CVE-2025-32463—99.1%
KEV—80Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability—CVE-2021-33742—99.0%
KEV—80Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability—CVE-2025-31125—99.0%
KEV—80Vite Vitejs Improper Access Control Vulnerability—CVE-2013-7331—99.0%
KEV—80Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2026-33634—99.0%
KEV—80Aquasecurity Trivy Embedded Malicious Code Vulnerability—CVE-2023-43770—99.0%
KEV—80Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability—CVE-2025-2746—99.0%
KEV—80Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2025-24054—99.0%
KEV—80Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability—CVE-2009-0557—99.0%
KEV—80Microsoft Office Object Record Corruption Vulnerability—CVE-2016-7193—99.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2016-7262—99.0%
KEV—80Microsoft Office Security Feature Bypass Vulnerability—CVE-2021-27104—99.0%
KEVR80Accellion FTA OS Command Injection Vulnerability—CVE-2020-26919—99.0%
KEV—80Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability—CVE-2021-252978.8 HIG99.0%
KEV—80Nagios XI OS Command Injection53dCVE-2025-25181—99.0%
KEV—80 Advantive VeraCore SQL Injection Vulnerability—CVE-2023-6549—99.0%
KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—CVE-2017-0101—99.0%
KEVR80Microsoft Windows Transaction Manager Privilege Escalation Vulnerability—CVE-2019-5825—99.0%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2022-294999.8 CRI99.0%
KEVR80Mitel MiVoice Connect Data Validation Vulnerability25dCVE-2015-17017.8 HIG99.0%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability17dCVE-2018-0125—99.0%
KEV—80Cisco VPN Routers Remote Code Execution Vulnerability—CVE-2025-58034—99.0%
KEV—80Fortinet FortiWeb OS Command Injection Vulnerability—CVE-2022-218827.0 HIG99.0%
KEVR80Microsoft Win32k Privilege Escalation Vulnerability16dCVE-2022-37055—99.0%
KEV—80D-Link Routers Buffer Overflow Vulnerability—