Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,268
- Medium5,273
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-0147—97.0%
KEV—79Cisco Secure Access Control System Java Deserialization Vulnerability—CVE-2017-0022—97.0%
KEV—79Microsoft XML Core Services Information Disclosure Vulnerability—CVE-2023-42916—97.0%
KEV—79Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability—CVE-2018-199438.0 HIG96.9%
KEVR79QNAP NAS File Station Cross-Site Scripting Vulnerability18dCVE-2024-11182—96.9%
KEV—79MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability—CVE-2022-27926—96.9%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability—CVE-2021-44207—96.9%
KEV—79Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability —CVE-2025-24085—96.9%
KEV—79Apple Multiple Products Use-After-Free Vulnerability—CVE-2023-50224—96.9%
KEV—79TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability—CVE-2019-8605—96.9%
KEV—79Apple Multiple Products Use-After-Free Vulnerability—CVE-2024-38813—96.9%
KEV—79VMware vCenter Server Privilege Escalation Vulnerability—CVE-2026-22719—96.9%
KEV—79Broadcom VMware Aria Operations Command Injection Vulnerability—CVE-2010-5326—96.9%
KEV—79SAP NetWeaver Remote Code Execution Vulnerability—CVE-2020-4006—96.9%
KEV—79Multiple VMware Products Command Injection Vulnerability—CVE-2025-625938.8 HIG96.8%
KEV—79Ray-Project Ray Code Injection Vulnerability14dCVE-2023-26359—96.8%
KEV—79Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2023-7101—96.8%
KEV—79Spreadsheet::ParseExcel Remote Code Execution Vulnerability—CVE-2023-36036—96.8%
KEV—79Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability—CVE-2023-6345—96.8%
KEV—79Google Skia Integer Overflow Vulnerability—CVE-2020-27950—96.8%
KEV—79Apple Multiple Products Memory Initialization Vulnerability—CVE-2021-200227.2 HIG96.8%
KEVR79SonicWall Email Security Unrestricted Upload of File Vulnerability19dCVE-2023-32409—96.8%
KEV—79Apple Multiple Products WebKit Sandbox Escape Vulnerability—CVE-2021-30533—96.8%
KEV—79Google Chromium PopupBlocker Security Bypass Vulnerability—CVE-2026-648499.3 CRI96.7%
KEV—79MLflow Server-Side Request Forgery Vulnerability11dCVE-2022-22620—96.7%
KEV—79Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability—CVE-2020-3837—96.7%
KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2020-0986—96.7%
KEV—79Microsoft Windows Kernel Privilege Escalation Vulnerability—CVE-2022-4262—96.7%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2026-586449.8 CRI96.6%
KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability45dCVE-2024-204815.8 MED96.6%
KEV—79Cisco ASA and FTD Denial-of-Service Vulnerability20dCVE-2025-670389.8 CRI96.6%
KEV—79Lantronix EDS5000 Code Injection Vulnerability56dCVE-2023-35311—96.6%
KEV—79Microsoft Outlook Security Feature Bypass Vulnerability—CVE-2019-7286—96.6%
KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2023-41064—96.5%
KEV—79Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability—CVE-2026-21513—96.5%
KEV—79Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability—CVE-2024-4947—96.5%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2015-0310—96.5%
KEV—79Adobe Flash Player ASLR Bypass Vulnerability—CVE-2022-38028—96.5%
KEV—79Microsoft Windows Print Spooler Privilege Escalation Vulnerability —CVE-2015-2360—96.5%
KEV—79Microsoft Win32k Privilege Escalation Vulnerability—CVE-2026-489089.8 CRI96.4%
KEV—79JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability54d