Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-37969—98.0%
KEV—79Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability—CVE-2019-19356—98.0%
KEV—79Netis WF2419 Devices Remote Code Execution Vulnerability—CVE-2020-31536.5 MED98.0%
KEVR79Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability19dCVE-2025-27363—97.9%
KEV—79FreeType Out-of-Bounds Write Vulnerability—CVE-2018-8581—97.9%
KEVR79Microsoft Exchange Server Privilege Escalation Vulnerability—CVE-2026-45247—97.9%
KEV—79Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability—CVE-2024-4978—97.9%
KEV—79Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability—CVE-2025-30397—97.9%
KEV—79Microsoft Windows Scripting Engine Type Confusion Vulnerability—CVE-2020-5135—97.9%
KEVR79SonicWall SonicOS Buffer Overflow Vulnerability—CVE-2018-4063—97.9%
KEV—79Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability—CVE-2025-68461—97.9%
KEV—79RoundCube Webmail Cross-site Scripting Vulnerability—CVE-2023-28205—97.9%
KEV—79Apple Multiple Products WebKit Use-After-Free Vulnerability—CVE-2025-147339.8 CRI97.9%
KEV—79WatchGuard Firebox Out of Bounds Write Vulnerability20dCVE-2014-2817—97.9%
KEV—79Microsoft Internet Explorer Privilege Escalation Vulnerability—CVE-2024-37085—97.9%
KEVR79VMware ESXi Authentication Bypass Vulnerability—CVE-2021-369487.8 HIG97.9%
KEV—79Microsoft Windows Update Medic Service Privilege Escalation Vulnerability21dCVE-2021-21166—97.9%
KEV—79Google Chromium Race Condition Vulnerability—CVE-2016-33516.5 MED97.9%
KEVR79Microsoft Internet Explorer and Edge Information Disclosure Vulnerability17dCVE-2020-8196—97.9%
KEV—79Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability—CVE-2026-561645.3 MED97.9%
KEV—79Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability48dCVE-2026-21510—97.8%
KEV—79Microsoft Windows Shell Protection Mechanism Failure Vulnerability—CVE-2023-36802—97.8%
KEV—79Microsoft Streaming Service Proxy Privilege Escalation Vulnerability—CVE-2018-5002—97.8%
KEV—79Adobe Flash Player Stack-based Buffer Overflow Vulnerability—CVE-2023-202695.0 MED97.8%
KEVR79Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability20dCVE-2021-22506—97.8%
KEV—79Micro Focus Access Manager Information Leakage Vulnerability—CVE-2018-68826.1 MED97.8%
KEVR79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability18dCVE-2024-49138—97.8%
KEV—79Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability—CVE-2015-2590—97.8%
KEV—79Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability—CVE-2026-202457.8 HIG97.8%
KEV—79Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability39dCVE-2016-7855—97.8%
KEV—79Adobe Flash Player Use-After-Free Vulnerability—CVE-2024-352507.8 HIG97.8%
KEV—79Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability 42dCVE-2022-0185—97.8%
KEV—79Linux Kernel Heap-Based Buffer Overflow Vulnerability—CVE-2009-1862—97.8%
KEV—79Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability—CVE-2019-18187—97.8%
KEV—79Trend Micro OfficeScan Directory Traversal Vulnerability—CVE-2023-48365—97.7%
KEVR79Qlik Sense HTTP Tunneling Vulnerability—CVE-2022-411288.8 HIG97.7%
KEV—79Microsoft Windows Scripting Languages Remote Code Execution Vulnerability21dCVE-2022-3038—97.7%
KEV—79Google Chromium Network Service Use-After-Free Vulnerability—CVE-2026-20122—97.7%
KEV—79Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability—CVE-2025-4632—97.7%
KEV—79Samsung MagicINFO 9 Server Path Traversal Vulnerability—CVE-2014-0502—97.7%
KEV—79Adobe Flash Player Double Free Vulnerablity—