Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,277
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-11120—98.1%
KEV—79GeoVision Devices OS Command Injection Vulnerability—CVE-2025-27363—98.1%
KEV—79FreeType Out-of-Bounds Write Vulnerability—CVE-2024-213517.6 HIG98.1%
KEV—79Microsoft Windows SmartScreen Security Feature Bypass Vulnerability71dCVE-2018-4063—98.0%
KEV—79Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability—CVE-2020-5135—98.0%
KEVR79SonicWall SonicOS Buffer Overflow Vulnerability—CVE-2025-68461—98.0%
KEV—79RoundCube Webmail Cross-site Scripting Vulnerability—CVE-2025-30397—98.0%
KEV—79Microsoft Windows Scripting Engine Type Confusion Vulnerability—CVE-2023-28205—98.0%
KEV—79Apple Multiple Products WebKit Use-After-Free Vulnerability—CVE-2024-4978—98.0%
KEV—79Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability—CVE-2018-8581—98.0%
KEVR79Microsoft Exchange Server Privilege Escalation Vulnerability—CVE-2024-37085—98.0%
KEVR79VMware ESXi Authentication Bypass Vulnerability—CVE-2014-2817—98.0%
KEV—79Microsoft Internet Explorer Privilege Escalation Vulnerability—CVE-2016-33516.5 MED98.0%
KEVR79Microsoft Internet Explorer and Edge Information Disclosure Vulnerability68dCVE-2025-147339.8 CRI98.0%
KEVR79WatchGuard Firebox Out of Bounds Write Vulnerability42dCVE-2024-49138—98.0%
KEV—79Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability—CVE-2020-8196—98.0%
KEV—79Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—CVE-2026-1049358.6 HIG98.0%
KEV—79Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability7dCVE-2021-22506—98.0%
KEV—79Micro Focus Access Manager Information Leakage Vulnerability—CVE-2022-0185—97.9%
KEV—79Linux Kernel Heap-Based Buffer Overflow Vulnerability—CVE-2015-2590—97.9%
KEV—79Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability—CVE-2026-20122—97.9%
KEV—79Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability—CVE-2024-352507.8 HIG97.9%
KEV—79Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability 92dCVE-2026-202457.8 HIG97.9%
KEV—79Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability90dCVE-2016-7855—97.9%
KEV—79Adobe Flash Player Use-After-Free Vulnerability—CVE-2023-202695.0 MED97.9%
KEVR79Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability70dCVE-2022-3038—97.9%
KEV—79Google Chromium Network Service Use-After-Free Vulnerability—CVE-2014-0502—97.9%
KEV—79Adobe Flash Player Double Free Vulnerablity—CVE-2026-33017—97.9%
KEV—79Langflow Code Injection Vulnerability—CVE-2019-18187—97.9%
KEV—79Trend Micro OfficeScan Directory Traversal Vulnerability—CVE-2018-5002—97.9%
KEV—79Adobe Flash Player Stack-based Buffer Overflow Vulnerability—CVE-2022-411288.8 HIG97.9%
KEV—79Microsoft Windows Scripting Languages Remote Code Execution Vulnerability71dCVE-2024-27443—97.9%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability—CVE-2023-41993—97.9%
KEV—79Apple Multiple Products WebKit Code Execution Vulnerability—CVE-2022-1096—97.9%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2026-21510—97.9%
KEV—79Microsoft Windows Shell Protection Mechanism Failure Vulnerability—CVE-2026-600049.8 CRI97.8%
KEV—79Gitea Code Injection Vulnerability55dCVE-2020-1380—97.8%
KEV—79Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2016-9563—97.8%
KEV—79SAP NetWeaver XML External Entity (XXE) Vulnerability—CVE-2021-27878—97.8%
KEVR79Veritas Backup Exec Agent Command Execution Vulnerability—CVE-2016-0040—97.8%
KEV—79Microsoft Windows Kernel Privilege Escalation Vulnerability—