Vulnerabilities exploitable today
399,467in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,403
- High15,277
- Medium14,292
- Low1,366
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-54948—97.8%
KEV—79Trend Micro Apex One OS Command Injection Vulnerability—CVE-2021-21166—97.8%
KEV—79Google Chromium Race Condition Vulnerability—CVE-2021-27878—97.8%
KEVR79Veritas Backup Exec Agent Command Execution Vulnerability—CVE-2016-9563—97.8%
KEV—79SAP NetWeaver XML External Entity (XXE) Vulnerability—CVE-2016-4656—97.8%
KEV—79Apple iOS Memory Corruption Vulnerability—CVE-2021-3560—97.8%
KEV—79Red Hat Polkit Incorrect Authorization Vulnerability—CVE-2025-230069.8 CRI97.8%
KEVR79SonicWall SMA1000 Appliances Deserialization Vulnerability27dCVE-2026-194909.8 CRI97.8%
KEV—79Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability13dCVE-2023-28206—97.8%
KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2022-4262—97.8%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2021-369487.8 HIG97.8%
KEV—79Microsoft Windows Update Medic Service Privilege Escalation Vulnerability71dCVE-2024-96809.8 CRI97.8%
KEVR79Mozilla Firefox Use-After-Free Vulnerability78dCVE-2015-5317—97.7%
KEV—79Jenkins User Interface (UI) Information Disclosure Vulnerability—CVE-2023-32435—97.7%
KEV—79Apple Multiple Products WebKit Memory Corruption Vulnerability—CVE-2021-22899—97.7%
KEV—79Ivanti Pulse Connect Secure Command Injection Vulnerability—CVE-2016-6367—97.7%
KEV—79Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability—CVE-2014-2120—97.7%
KEV—79Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability—CVE-2024-44309—97.7%
KEV—79Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability—CVE-2024-37079—97.7%
KEV—79Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability—CVE-2025-141748.8 HIG97.7%
KEV—79Google Chromium Out of Bounds Memory Access Vulnerability13dCVE-2017-0210—97.7%
KEV—79Microsoft Internet Explorer Privilege Escalation Vulnerability—CVE-2014-0546—97.7%
KEV—79Adobe Reader and Acrobat Sandbox Bypass Vulnerability—CVE-2022-0609—97.7%
KEV—79Google Chromium Animation Use-After-Free Vulnerability—CVE-2018-8639—97.7%
KEVR79Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability—CVE-2016-10199.8 CRI97.7%
KEVR79Adobe Flash Player Arbitrary Code Execution Vulnerability19dCVE-2020-24363—97.7%
KEV—79TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability—CVE-2021-31956—97.7%
KEV—79Microsoft Windows NTFS Privilege Escalation Vulnerability—CVE-2020-27930—97.6%
KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2025-23209—97.6%
KEV—79Craft CMS Code Injection Vulnerability—CVE-2016-0162—97.6%
KEV—79Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2019-1297—97.6%
KEV—79Microsoft Excel Remote Code Execution Vulnerability—CVE-2021-344847.8 HIG97.6%
KEV—79Microsoft Windows User Profile Service Privilege Escalation Vulnerability71dCVE-2018-199438.0 HIG97.6%
KEVR79QNAP NAS File Station Cross-Site Scripting Vulnerability69dCVE-2024-40891—97.6%
KEV—79Zyxel DSL CPE OS Command Injection Vulnerability—CVE-2023-29360—97.6%
KEV—79Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability—CVE-2017-6742—97.6%
KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2019-0903—97.6%
KEV—79Microsoft GDI Remote Code Execution Vulnerability—CVE-2024-7971—97.6%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2020-9377—97.6%
KEV—79D-Link DIR-610 Devices Remote Command Execution—CVE-2012-5054—97.6%
KEV—79Adobe Flash Player Integer Overflow Vulnerability—