Vulnerabilities exploitable today
402,460in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,668
Distribution · last window
- Critical3,959
- High16,991
- Medium15,819
- Low1,541
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-379249.8 CRI97.7%
——29In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in kerberos authentication
Setting sess->user = NULL was introduced to fix the dangling pointer
created by ksmbd_free_user. However, it is possible another thread could
be operating on the session and make use of sess->user after it has been
passed to ksmbd_free_user but before sess->user is set to NULL.8dCVE-2017-5805—97.7%
——29——CVE-2016-7266—97.7%
——29——CVE-1999-0867—97.6%
——29——CVE-2024-29855—97.6%
——29——CVE-2004-0484—97.6%
——29——CVE-2021-270789.1 CRI97.6%
——29Microsoft Exchange Server Remote Code Execution Vulnerability65dCVE-2010-3639—97.6%
——29——CVE-2006-0544—97.6%
——29——CVE-2011-1250—97.6%
——29——CVE-2014-5111—97.6%
——29——CVE-2016-7248—97.6%
——29——CVE-2023-524409.8 CRI97.6%
——29In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
If authblob->SessionKey.Length is bigger than session key
size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.
cifs_arc4_crypt copy to session key array from SessionKey from client.69dCVE-2010-2266—97.6%
——29——CVE-2022-30450—97.6%
——29——CVE-2005-3277—97.6%
——29——CVE-2018-17879—97.6%
——29——CVE-2012-0162—97.6%
——29——CVE-2018-8540—97.6%
——29——CVE-2018-8057—97.6%
——29——CVE-2009-4502—97.6%
——29——CVE-2022-21824—97.6%
——29——CVE-2013-3863—97.6%
——29——CVE-2006-0994—97.6%
——29——CVE-2016-7053—97.6%
——29——CVE-2021-35188.8 HIG97.6%
——29There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.10dCVE-2025-2005—97.6%
——29——CVE-2017-2985—97.6%
——29——CVE-2006-6450—97.6%
——29——CVE-2025-548978.8 HIG97.6%
——29Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.5dCVE-2014-2776—97.6%
——29——CVE-2021-345358.8 HIG97.6%
——29Remote Desktop Client Remote Code Execution Vulnerability74dCVE-2024-1283—97.6%
——29——CVE-2017-14135—97.6%
——29——CVE-2025-44084—97.6%
——29——CVE-2015-2435—97.6%
——29——CVE-2017-8737—97.6%
——29——CVE-2021-31932—97.6%
——29——CVE-2009-3677—97.6%
——29——CVE-2008-1067—97.6%
——29——