Vulnerabilities exploitable today
349,216in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,299
- High4,252
- Medium3,580
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-6543—95.0%
KEV—79Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability—CVE-2022-20701—95.0%
KEV—79Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability—CVE-2019-1132—95.0%
KEV—79Microsoft Win32k Privilege Escalation Vulnerability—CVE-2022-32893—95.0%
KEV—79Apple iOS and macOS Out-of-Bounds Write Vulnerability—CVE-2025-21333—95.0%
KEV—79Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability—CVE-2022-26904—95.0%
KEV—79Microsoft Windows User Profile Service Privilege Escalation Vulnerability—CVE-2019-0703—94.9%
KEV—78Microsoft Windows SMB Information Disclosure Vulnerability—CVE-2023-23529—94.9%
KEV—78Apple Multiple Products WebKit Type Confusion Vulnerability—CVE-2021-21206—94.9%
KEV—78Google Chromium Blink Use-After-Free Vulnerability—CVE-2023-42917—94.8%
KEV—78Apple Multiple Products WebKit Memory Corruption Vulnerability—CVE-2024-57726—94.8%
KEVR78SimpleHelp Missing Authorization Vulnerability—CVE-2022-20703—94.8%
KEV—78Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability—CVE-2024-44308—94.8%
KEV—78Apple Multiple Products Code Execution Vulnerability—CVE-2025-6558—94.8%
KEV—78Google Chromium ANGLE and GPU Improper Input Validation Vulnerability—CVE-2022-23748—94.7%
KEV—78Dante Discovery Process Control Vulnerability—CVE-2015-2291—94.7%
KEVR78Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability—CVE-2021-30563—94.7%
KEV—78Google Chromium V8 Type Confusion Vulnerability—CVE-2018-14558—94.5%
KEV—78Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability—CVE-2010-4398—94.5%
KEV—78Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability—CVE-2025-43529—94.5%
KEV—78Apple Multiple Products Use-After-Free WebKit Vulnerability—CVE-2019-1388—94.5%
KEVR78Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability—CVE-2018-19323—94.4%
KEVR78GIGABYTE Multiple Products Privilege Escalation Vulnerability—CVE-2022-42856—94.4%
KEV—78Apple iOS Type Confusion Vulnerability—CVE-2025-48927—94.4%
KEV—78TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability—CVE-2025-2783—94.4%
KEV—78Google Chromium Mojo Sandbox Escape Vulnerability—CVE-2024-4671—94.3%
KEV—78Google Chromium Visuals Use-After-Free Vulnerability—CVE-2026-41091—94.3%
KEV—78Microsoft Defender Link Following Vulnerability—CVE-2018-0156—94.3%
KEV—78Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability—CVE-2021-28310—94.3%
KEV—78Microsoft Win32k Privilege Escalation Vulnerability—CVE-2019-11634—94.2%
KEVR78Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability—CVE-2018-0172—94.1%
KEV—78Cisco IOS and IOS XE Software Improper Input Validation Vulnerability—CVE-2018-0155—94.1%
KEV—78Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability—CVE-2021-1870—94.1%
KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2023-0386—94.0%
KEV—78Linux Kernel Improper Ownership Management Vulnerability—CVE-2025-41244—94.0%
KEV—78Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability—CVE-2024-38189—94.0%
KEV—78Microsoft Project Remote Code Execution Vulnerability —CVE-2021-4102—94.0%
KEV—78Google Chromium V8 Use-After-Free Vulnerability—CVE-2012-2034—94.0%
KEV—78Adobe Flash Player Memory Corruption Vulnerability—CVE-2018-0174—94.0%
KEV—78Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability—CVE-2018-0173—94.0%
KEV—78Cisco IOS and IOS XE Software Improper Input Validation Vulnerability—