Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2012-1854—97.4%
KEV—79Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability—CVE-2023-36563—97.4%
KEV—79Microsoft WordPad Information Disclosure Vulnerability—CVE-2025-54948—97.4%
KEV—79Trend Micro Apex One OS Command Injection Vulnerability—CVE-2020-24363—97.4%
KEV—79TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability—CVE-2024-7971—97.4%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2016-3309—97.3%
KEVR79Microsoft Windows Kernel Privilege Escalation Vulnerability—CVE-2026-735708.9 HIG97.3%
KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7dCVE-2014-9163—97.3%
KEV—79Adobe Flash Player Stack-Based Buffer Overflow Vulnerability—CVE-2021-31956—97.3%
KEV—79Microsoft Windows NTFS Privilege Escalation Vulnerability—CVE-2016-4171—97.3%
KEV—79Adobe Flash Player Remote Code Execution Vulnerability—CVE-2014-8439—97.2%
KEV—79Adobe Flash Player Dereferenced Pointer Vulnerability—CVE-2021-21148—97.2%
KEV—79Google Chromium V8 Heap Buffer Overflow Vulnerability—CVE-2021-37976—97.2%
KEV—79Google Chromium Information Disclosure Vulnerability—CVE-2022-26871—97.2%
KEV—79Trend Micro Apex Central Arbitrary File Upload Vulnerability—CVE-2025-31200—97.2%
KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2026-489399.8 CRI97.2%
KEV—79iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability51dCVE-2025-7775—97.2%
KEV—79Citrix NetScaler Memory Overflow Vulnerability—CVE-2016-1010—97.2%
KEV—79Adobe Flash Player and AIR Integer Overflow Vulnerability—CVE-2017-0210—97.2%
KEV—79Microsoft Internet Explorer Privilege Escalation Vulnerability—CVE-2016-7836—97.2%
KEV—79SKYSEA Client View Improper Authentication Vulnerability—CVE-2024-203596.0 MED97.2%
KEV—79Cisco ASA and FTD Privilege Escalation Vulnerability20dCVE-2021-413795.5 MED97.2%
KEVR79Microsoft Windows Installer Privilege Escalation Vulnerability12dCVE-2019-1215—97.1%
KEVR79Microsoft Windows Privilege Escalation Vulnerability—CVE-2019-1322—97.1%
KEVR79Microsoft Windows Privilege Escalation Vulnerability—CVE-2025-66376—97.1%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability—CVE-2026-481729.8 CRI97.1%
KEV—79LiteSpeed cPanel Plugin Privilege Escalation Vulnerability39dCVE-2023-37450—97.1%
KEV—79Apple Multiple Products WebKit Code Execution Vulnerability—CVE-2014-2120—97.1%
KEV—79Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability—CVE-2023-36761—97.1%
KEV—79Microsoft Word Information Disclosure Vulnerability—CVE-2016-7892—97.1%
KEV—79Adobe Flash Player Use-After-Free Vulnerability—CVE-2022-22047—97.1%
KEV—79Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability—CVE-2019-55916.5 MED97.0%
KEVR79Fortinet FortiOS Default Configuration Vulnerability17dCVE-2018-8440—97.0%
KEVR79Microsoft Windows Privilege Escalation Vulnerability—CVE-2020-11899—97.0%
KEV—79Treck TCP/IP stack Out-of-Bounds Read Vulnerability—CVE-2015-5123—97.0%
KEV—79Adobe Flash Player Use-After-Free Vulnerability—CVE-2022-22718—97.0%
KEV—79Microsoft Windows Print Spooler Privilege Escalation Vulnerability—CVE-2024-7965—97.0%
KEV—79Google Chromium V8 Inappropriate Implementation Vulnerability—CVE-2019-8506—97.0%
KEV—79Apple Multiple Products Type Confusion Vulnerability—CVE-2010-4345—97.0%
KEV—79Exim Privilege Escalation Vulnerability—CVE-2018-0147—97.0%
KEV—79Cisco Secure Access Control System Java Deserialization Vulnerability—