Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-19006—98.4%
KEV—80 Sangoma FreePBX Improper Authentication Vulnerability—CVE-2017-16651—98.4%
KEV—80Roundcube Webmail File Disclosure Vulnerability—CVE-2016-0099—98.4%
KEVR80Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability—CVE-2017-68848.8 HIG98.4%
KEVR80Zyxel EMG2926 Routers Command Injection Vulnerability27dCVE-2014-3153—98.4%
KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2022-31199—98.4%
KEVR80Netwrix Auditor Insecure Object Deserialization Vulnerability—CVE-2020-5735—98.4%
KEV—80Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability—CVE-2020-17144—98.4%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability—CVE-2018-4990—98.4%
KEV—80Adobe Acrobat and Reader Double Free Vulnerability—CVE-2021-38163—98.4%
KEV—80SAP NetWeaver Unrestricted File Upload Vulnerability—CVE-2018-17480—98.3%
KEV—80Google Chromium V8 Out-of-Bounds Write Vulnerability—CVE-2020-13671—98.3%
KEV—80Drupal core Un-restricted Upload of File—CVE-2022-22960—98.3%
KEV—80VMware Multiple Products Privilege Escalation Vulnerability—CVE-2015-2387—98.3%
KEV—80Microsoft ATM Font Driver Privilege Escalation Vulnerability—CVE-2021-39935—98.3%
KEV—80GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability—CVE-2017-6327—98.3%
KEV—80Symantec Messaging Gateway Remote Code Execution Vulnerability—CVE-2015-1770—98.3%
KEV—80Microsoft Office Uninitialized Memory Use Vulnerability—CVE-2026-91989.8 CRI98.3%
KEV—79IBM Langflow Code Injection Vulnerability14dCVE-2016-5198—98.3%
KEV—79Google Chromium V8 Out-of-Bounds Memory Vulnerability—CVE-2026-6973—98.3%
KEV—79Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability—CVE-2010-5330—98.3%
KEV—79Ubiquiti AirOS Command Injection Vulnerability—CVE-2021-37975—98.3%
KEV—79Google Chromium V8 Use-After-Free Vulnerability—CVE-2013-5065—98.3%
KEV—79Microsoft Windows Kernel Privilege Escalation Vulnerability—CVE-2008-41284.3 MED98.3%
KEV—79Cisco IOS Cross-Site Request Forgery Vulnerability48dCVE-2020-2509—98.3%
KEV—79QNAP Network-Attached Storage (NAS) Command Injection Vulnerability—CVE-2015-0071—98.3%
KEV—79Microsoft Internet Explorer ASLR Bypass Vulnerability—CVE-2013-5223—98.3%
KEV—79D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability—CVE-2018-13383—98.3%
KEVR79Fortinet FortiOS and FortiProxy Out-of-bounds Write—CVE-2016-4655—98.3%
KEV—79Apple iOS Information Disclosure Vulnerability—CVE-2023-39780—98.3%
KEV—79ASUS RT-AX55 Routers OS Command Injection Vulnerability—CVE-2025-9377—98.3%
KEV—79TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability—CVE-2020-8195—98.2%
KEV—79Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—CVE-2016-3298—98.2%
KEV—79Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability—CVE-2020-8218—98.2%
KEV—79Pulse Connect Secure Code Injection Vulnerability—CVE-2025-21042—98.2%
KEV—79Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2020-35730—98.2%
KEV—79Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—CVE-2013-0641—98.2%
KEV—79Adobe Reader Buffer Overflow Vulnerability—CVE-2024-57968—98.2%
KEV—79Advantive VeraCore Unrestricted File Upload Vulnerability—CVE-2021-30633—98.2%
KEV—79Google Chromium Indexed DB API Use-After-Free Vulnerability—CVE-2023-3079—98.2%
KEV—79Google Chromium V8 Type Confusion Vulnerability—