Vulnerabilities exploitable today
401,031in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,973
- Medium14,894
- Low1,472
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-14634—96.6%
KEV—79Linux Kernel Integer Overflow Vulnerability—CVE-2020-10181—96.6%
KEV—79Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability—CVE-2026-185778.1 HIG96.6%
KEV—79N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability78dCVE-2019-7193—96.6%
KEVR79QNAP QTS Improper Input Validation Vulnerability—CVE-2023-28204—96.6%
KEV—79Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability—CVE-2022-264858.8 HIG96.6%
KEV—79Mozilla Firefox Use-After-Free Vulnerability63dCVE-2024-490398.8 HIG96.6%
KEVR79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability78dCVE-2018-0151—96.6%
KEV—79Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability—CVE-2021-1789—96.5%
KEV—79Apple Multiple Products Type Confusion Vulnerability—CVE-2026-823299.8 CRI96.5%
KEV—79JFrog Artifactory Improper Authentication Vulnerability48dCVE-2022-38181—96.5%
KEV—79Arm Mali GPU Kernel Driver Use-After-Free Vulnerability—CVE-2021-22900—96.5%
KEV—79Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability—CVE-2026-7646010.0 CRI96.5%
KEV—79Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability13dCVE-2025-6554—96.5%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2023-381807.5 HIG96.5%
KEV—79Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability72dCVE-2025-29824—96.5%
KEVR79Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability—CVE-2022-1364—96.5%
KEV—79Google Chromium V8 Type Confusion Vulnerability—CVE-2019-9875—96.5%
KEV—79Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability—CVE-2025-31201—96.5%
KEV—79Apple Multiple Products Arbitrary Read and Write Vulnerability—CVE-2017-12240—96.5%
KEV—79Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability—CVE-2016-0165—96.5%
KEV—79Microsoft Win32k Privilege Escalation Vulnerability—CVE-2024-12686—96.5%
KEV—79BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability—CVE-2021-27876—96.4%
KEVR79Veritas Backup Exec Agent File Access Vulnerability—CVE-2024-38213—96.4%
KEV—79Microsoft Windows SmartScreen Security Feature Bypass Vulnerability—CVE-2026-22769—96.4%
KEV—79Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability—CVE-2015-4902—96.4%
KEV—79Oracle Java SE Integrity Check Vulnerability—CVE-2023-20867—96.4%
KEV—79VMware Tools Authentication Bypass Vulnerability—CVE-2019-3010—96.4%
KEV—79Oracle Solaris Privilege Escalation Vulnerability—CVE-2021-30858—96.4%
KEV—79Apple iOS, iPadOS, macOS Use-After-Free Vulnerability—CVE-2023-41991—96.4%
KEV—79Apple Multiple Products Improper Certificate Validation Vulnerability—CVE-2026-862189.8 CRI96.4%
KEV—79N-able N-central Static Code Injection Vulnerability42dCVE-2022-22948—96.4%
KEV—79VMware vCenter Server Incorrect Default File Permissions Vulnerability —CVE-2026-215897.5 HIG96.2%
KEV—79Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability1dCVE-2025-429999.1 CRI96.2%
KEVR79SAP NetWeaver Deserialization Vulnerability71dCVE-2024-21410—96.2%
KEV—79Microsoft Exchange Server Privilege Escalation Vulnerability—CVE-2022-22675—96.2%
KEV—79Apple macOS Out-of-Bounds Write Vulnerability—CVE-2022-20775—96.2%
KEV—79Cisco SD-WAN Path Traversal Vulnerability—CVE-2023-32373—96.1%
KEV—79Apple Multiple Products WebKit Use-After-Free Vulnerability—CVE-2023-217157.3 HIG96.1%
KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability62dCVE-2021-28663—96.1%
KEV—79Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability—