Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-1380—97.7%
KEV—79Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2014-0502—97.7%
KEV—79Adobe Flash Player Double Free Vulnerablity—CVE-2022-1096—97.7%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2023-28206—97.7%
KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2018-199499.8 CRI97.7%
KEVR79QNAP NAS File Station Command Injection Vulnerability18dCVE-2021-27878—97.7%
KEVR79Veritas Backup Exec Agent Command Execution Vulnerability—CVE-2018-199536.1 MED97.7%
KEVR79QNAP NAS File Station Cross-Site Scripting Vulnerability18dCVE-2016-9563—97.7%
KEV—79SAP NetWeaver XML External Entity (XXE) Vulnerability—CVE-2023-32439—97.7%
KEV—79Apple Multiple Products WebKit Type Confusion Vulnerability—CVE-2024-27443—97.6%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability—CVE-2025-230069.8 CRI97.6%
KEVR79SonicWall SMA1000 Appliances Deserialization Vulnerability27dCVE-2016-4656—97.6%
KEV—79Apple iOS Memory Corruption Vulnerability—CVE-2024-96809.8 CRI97.6%
KEVR79Mozilla Firefox Use-After-Free Vulnerability27dCVE-2023-32435—97.6%
KEV—79Apple Multiple Products WebKit Memory Corruption Vulnerability—CVE-2021-22899—97.6%
KEV—79Ivanti Pulse Connect Secure Command Injection Vulnerability—CVE-2025-14174—97.6%
KEV—79Google Chromium Out of Bounds Memory Access Vulnerability—CVE-2016-10199.8 CRI97.5%
KEVR79Adobe Flash Player Arbitrary Code Execution Vulnerability17dCVE-2024-37079—97.5%
KEV—79Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability—CVE-2014-0196—97.5%
KEV—79Linux Kernel Race Condition Vulnerability—CVE-2016-6367—97.5%
KEV—79Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability—CVE-2015-5317—97.5%
KEV—79Jenkins User Interface (UI) Information Disclosure Vulnerability—CVE-2024-44309—97.5%
KEV—79Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability—CVE-2020-27930—97.5%
KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2026-2441—97.5%
KEV—79Google Chromium CSS Use-After-Free Vulnerability—CVE-2024-40890—97.5%
KEV—79Zyxel DSL CPE OS Command Injection Vulnerability—CVE-2025-43300—97.5%
KEV—79Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2014-0546—97.5%
KEV—79Adobe Reader and Acrobat Sandbox Bypass Vulnerability—CVE-2023-29360—97.5%
KEV—79Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability—CVE-2022-0609—97.5%
KEV—79Google Chromium Animation Use-After-Free Vulnerability—CVE-2018-8639—97.5%
KEVR79Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability—CVE-2016-0162—97.5%
KEV—79Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2021-3560—97.5%
KEV—79Red Hat Polkit Incorrect Authorization Vulnerability—CVE-2025-23209—97.5%
KEV—79Craft CMS Code Injection Vulnerability—CVE-2019-0903—97.5%
KEV—79Microsoft GDI Remote Code Execution Vulnerability—CVE-2019-1297—97.5%
KEV—79Microsoft Excel Remote Code Execution Vulnerability—CVE-2021-344847.8 HIG97.5%
KEV—79Microsoft Windows User Profile Service Privilege Escalation Vulnerability21dCVE-2017-6742—97.4%
KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2020-9377—97.4%
KEV—79D-Link DIR-610 Devices Remote Command Execution—CVE-2024-40891—97.4%
KEV—79Zyxel DSL CPE OS Command Injection Vulnerability—CVE-2012-5054—97.4%
KEV—79Adobe Flash Player Integer Overflow Vulnerability—