Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,277
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2016-0099—98.5%
KEVR80Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability—CVE-2021-38163—98.5%
KEV—80SAP NetWeaver Unrestricted File Upload Vulnerability—CVE-2014-3153—98.5%
KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2020-17144—98.5%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2021-39935—98.5%
KEV—80GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability—CVE-2020-13671—98.5%
KEV—80Drupal core Un-restricted Upload of File—CVE-2018-4990—98.5%
KEV—80Adobe Acrobat and Reader Double Free Vulnerability—CVE-2017-6327—98.5%
KEV—80Symantec Messaging Gateway Remote Code Execution Vulnerability—CVE-2020-5735—98.5%
KEV—80Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability—CVE-2022-31199—98.5%
KEVR80Netwrix Auditor Insecure Object Deserialization Vulnerability—CVE-2015-1770—98.4%
KEV—80Microsoft Office Uninitialized Memory Use Vulnerability—CVE-2018-17480—98.4%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2026-203165.3 MED98.4%
KEVR80Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability34dCVE-2021-37975—98.4%
KEV—80Google Chromium V8 Use-After-Free Vulnerability—CVE-2015-2387—98.4%
KEV—80Microsoft ATM Font Driver Privilege Escalation Vulnerability—CVE-2022-22960—98.4%
KEV—80VMware Multiple Products Privilege Escalation Vulnerability—CVE-2013-5065—98.4%
KEV—80Microsoft Windows Kernel Privilege Escalation Vulnerability—CVE-2016-5198—98.4%
KEV—80Google Chromium V8 Out-of-Bounds Memory Vulnerability—CVE-2020-2509—98.4%
KEV—80QNAP Network-Attached Storage (NAS) Command Injection Vulnerability—CVE-2017-68848.8 HIG98.4%
KEVR80Zyxel EMG2926 Routers Command Injection Vulnerability19dCVE-2021-30633—98.4%
KEV—80Google Chromium Indexed DB API Use-After-Free Vulnerability—CVE-2008-41288.1 HIG98.4%
KEV—80Cisco IOS Cross-Site Request Forgery Vulnerability27dCVE-2015-0071—98.4%
KEV—80Microsoft Internet Explorer ASLR Bypass Vulnerability—CVE-2018-13383—98.4%
KEVR80Fortinet FortiOS and FortiProxy Out-of-bounds Write—CVE-2022-40799—98.4%
KEV—80D-Link DNR-322L Download of Code Without Integrity Check Vulnerability—CVE-2016-4655—98.4%
KEV—80Apple iOS Information Disclosure Vulnerability—CVE-2020-8195—98.4%
KEV—80Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—CVE-2020-9715—98.4%
KEV—80Adobe Acrobat Use-After-Free Vulnerability—CVE-2016-3298—98.4%
KEV—80Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability—CVE-2025-210428.8 HIG98.4%
KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability13dCVE-2025-43300—98.3%
KEV—80Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2020-35730—98.3%
KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2025-20393—98.3%
KEV—80Cisco Multiple Products Improper Input Validation Vulnerability—CVE-2026-20133—98.3%
KEV—80Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability—CVE-2013-0641—98.3%
KEV—80Adobe Reader Buffer Overflow Vulnerability—CVE-2024-57968—98.3%
KEV—79Advantive VeraCore Unrestricted File Upload Vulnerability—CVE-2026-0300—98.3%
KEV—79Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability—CVE-2011-2005—98.3%
KEV—79Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability—CVE-2022-4135—98.3%
KEV—79Google Chromium GPU Heap Buffer Overflow Vulnerability—CVE-2020-8218—98.3%
KEV—79Pulse Connect Secure Code Injection Vulnerability—