Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,973
- Medium14,894
- Low1,472
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-64328—99.7%
KEV—80Sangoma FreePBX OS Command Injection Vulnerability—CVE-2017-2741—99.7%
——30——CVE-2020-8656—99.7%
——30——CVE-2014-0556—99.7%
——30——CVE-2013-6955—99.7%
——30——CVE-2011-0997—99.7%
——30——CVE-2018-17463—99.7%
KEV—80Google Chromium V8 Remote Code Execution Vulnerability—CVE-2017-17105—99.7%
——30——CVE-2020-28949—99.7%
KEV—80PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability—CVE-2013-3214—99.7%
——30——CVE-2023-25690—99.7%
——30——CVE-2020-15415—99.7%
KEV—80DrayTek Multiple Vigor Routers OS Command Injection Vulnerability—CVE-2020-12641—99.7%
KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2022-36974—99.7%
——30——CVE-2023-0921—99.7%
——30——CVE-2013-2566—99.7%
——30——CVE-2020-7796—99.7%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability—CVE-2015-1830—99.7%
——30——CVE-2020-5722—99.7%
KEV—80Grandstream Networks UCM6200 Series SQL Injection Vulnerability—CVE-2021-22123—99.7%
——30——CVE-2018-1000006—99.7%
——30——CVE-2013-72859.8 CRI99.7%
——30Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.12dCVE-2023-3388—99.7%
——30——CVE-2017-14495—99.7%
——30——CVE-2017-0213—99.7%
KEVR80Microsoft Windows Privilege Escalation Vulnerability—CVE-2010-3563—99.7%
——30——CVE-2024-38077—99.7%
——30——CVE-2024-38112—99.7%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability—CVE-2019-12314—99.7%
——30——CVE-2021-25080—99.7%
——30——CVE-2025-47916—99.7%
——30——CVE-2014-6037—99.7%
——30——CVE-2025-40551—99.7%
KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2015-2857—99.7%
——30——CVE-2019-12257—99.7%
——30——CVE-2017-11317—99.7%
KEV—80Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability—CVE-2021-21224—99.7%
KEV—80Google Chromium V8 Type Confusion Vulnerability—CVE-2017-5754—99.7%
——30——CVE-2024-12856—99.7%
——30——CVE-2024-6782—99.7%
——30——