Vulnerabilities exploitable today
402,516in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,756
New KEV · 24H0
Exploit Today ≥ 701,669
Distribution · last window
- Critical3,930
- High16,916
- Medium15,763
- Low1,523
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-6507—97.3%
——29——CVE-2018-8332—97.3%
——29——CVE-2015-2673—97.3%
——29——CVE-2011-0020—97.3%
——29——CVE-2024-28739—97.3%
——29——CVE-2022-38393—97.3%
——29——CVE-2009-2433—97.3%
——29——CVE-2023-38547—97.3%
——29——CVE-2010-1980—97.3%
——29——CVE-2018-12533—97.3%
——29——CVE-2010-0246—97.3%
——29——CVE-2006-4343—97.3%
——29——CVE-2011-1992—97.3%
——29——CVE-2022-1401—97.3%
——29——CVE-2018-8576—97.3%
——29——CVE-2014-10037—97.3%
——29——CVE-1999-0450—97.3%
——29——CVE-2021-27140—97.3%
——29——CVE-2019-1280—97.3%
——29——CVE-2024-216268.6 HIG97.3%
——29runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue.37dCVE-2019-25246—97.3%
——29——CVE-2021-3223—97.3%
——29——CVE-2016-0022—97.3%
——29——CVE-2013-5967—97.3%
——29——CVE-2018-8573—97.3%
——29——CVE-2018-8577—97.3%
——29——CVE-2018-8013—97.3%
——29——CVE-2003-0233—97.3%
——29——CVE-2020-11898—97.3%
——29——CVE-2020-24577—97.3%
——29——CVE-2024-582748.3 HIG97.3%
——29Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.23dCVE-2008-4814—97.3%
——29——CVE-2022-3900—97.3%
——29——CVE-2017-8527—97.3%
——29——CVE-2024-25850—97.3%
——29——CVE-2019-19642—97.3%
——29——CVE-2015-6251—97.3%
——29——CVE-2020-1219—97.3%
——29——CVE-2006-0020—97.3%
——29——CVE-2005-1664—97.3%
——29——