Vulnerabilities exploitable today
349,195in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,298
- High4,252
- Medium3,575
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-15999—98.8%
KEV—80Google Chrome FreeType Heap Buffer Overflow Vulnerability—CVE-2015-2502—98.8%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2025-14611—98.8%
KEV—80Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability—CVE-2023-49897—98.8%
KEV—80FXC AE1021, AE1021PE OS Command Injection Vulnerability—CVE-2025-25181—98.8%
KEV—80 Advantive VeraCore SQL Injection Vulnerability—CVE-2022-23227—98.8%
KEV—80NUUO NVRmini2 Devices Missing Authentication Vulnerability —CVE-2023-5217—98.8%
KEV—80Google Chromium libvpx Heap Buffer Overflow Vulnerability—CVE-2024-21182—98.8%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-12812—98.8%
KEVR80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability—CVE-2014-4404—98.8%
KEV—80Apple OS X Heap-Based Buffer Overflow Vulnerability—CVE-2024-38094—98.7%
KEVR80Microsoft SharePoint Deserialization Vulnerability—CVE-2023-28252—98.7%
KEVR80Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability—CVE-2006-2492—98.7%
KEV—80Microsoft Word Malformed Object Pointer Vulnerability—CVE-2020-16009—98.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2011-1889—98.7%
KEV—80Microsoft Forefront TMG Remote Code Execution Vulnerability—CVE-2021-26829—98.7%
KEV—80OpenPLC ScadaBR Cross-site Scripting Vulnerability—CVE-2016-1646—98.7%
KEV—80Google Chromium V8 Out-of-Bounds Read Vulnerability—CVE-2020-9715—98.7%
KEV—80Adobe Acrobat Use-After-Free Vulnerability—CVE-2021-40407—98.7%
KEV—80Reolink RLC-410W IP Camera OS Command Injection Vulnerability —CVE-2018-5430—98.7%
KEV—80TIBCO JasperReports Server Information Disclosure Vulnerability—CVE-2022-39197—98.7%
KEV—80Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability—CVE-2021-22017—98.7%
KEV—80VMware vCenter Server Improper Access Control—CVE-2016-3976—98.7%
KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2021-22893—98.7%
KEVR80Ivanti Pulse Connect Secure Use-After-Free Vulnerability—CVE-2025-32463—98.7%
KEV—80Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability—CVE-2014-4077—98.7%
KEV—80Microsoft IME Japanese Privilege Escalation Vulnerability—CVE-2013-2094—98.7%
KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2021-31196—98.7%
KEV—80Microsoft Exchange Server Information Disclosure Vulnerability—CVE-2024-29988—98.6%
KEV—80Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability—CVE-2015-2425—98.6%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2019-0803—98.6%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2013-3900—98.6%
KEV—80Microsoft WinVerifyTrust function Remote Code Execution—CVE-2015-2419—98.6%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2024-43573—98.6%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2019-17026—98.6%
KEV—80Mozilla Firefox And Thunderbird Type Confusion Vulnerability—CVE-2024-9379—98.6%
KEV—80Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability—CVE-2016-3235—98.6%
KEV—80Microsoft Office OLE DLL Side Loading Vulnerability—CVE-2021-3493—98.6%
KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2017-6737—98.6%
KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6862—98.6%
KEV—80NETGEAR Multiple Devices Buffer Overflow Vulnerability—