Vulnerabilities exploitable today
401,031in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,971
- Medium14,886
- Low1,471
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-23748—94.9%
KEV—78Dante Discovery Process Control Vulnerability—CVE-2024-4671—94.9%
KEV—78Google Chromium Visuals Use-After-Free Vulnerability—CVE-2024-38189—94.8%
KEV—78Microsoft Project Remote Code Execution Vulnerability —CVE-2019-0676—94.8%
KEV—78Microsoft Internet Explorer Information Disclosure Vulnerability—CVE-2019-116349.8 CRI94.8%
KEVR78Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability70dCVE-2026-8354810.0 CRI94.7%
KEV—78SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability48dCVE-2021-386467.8 HIG94.7%
KEVR78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability71dCVE-2022-3723—94.7%
KEV—78Google Chromium V8 Type Confusion Vulnerability—CVE-2023-28434—94.7%
KEV—78MinIO Security Feature Bypass Vulnerability—CVE-2026-185567.4 HIG94.7%
KEV—78N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability77dCVE-2023-0386—94.7%
KEV—78Linux Kernel Improper Ownership Management Vulnerability—CVE-2018-0172—94.6%
KEV—78Cisco IOS and IOS XE Software Improper Input Validation Vulnerability—CVE-2025-5419—94.6%
KEV—78Google Chromium V8 Out-of-Bounds Read and Write Vulnerability—CVE-2012-17109.8 CRI94.6%
KEVR78Oracle Fusion Middleware Unspecified Vulnerability19dCVE-2021-4102—94.6%
KEV—78Google Chromium V8 Use-After-Free Vulnerability—CVE-2021-1870—94.6%
KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2012-2034—94.6%
KEV—78Adobe Flash Player Memory Corruption Vulnerability—CVE-2018-0155—94.6%
KEV—78Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability—CVE-2018-0174—94.5%
KEV—78Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability—CVE-2018-0173—94.5%
KEV—78Cisco IOS and IOS XE Software Improper Input Validation Vulnerability—CVE-2020-0683—94.5%
KEV—78Microsoft Windows Installer Privilege Escalation Vulnerability—CVE-2024-5274—94.4%
KEV—78Google Chromium V8 Type Confusion Vulnerability—CVE-2026-208055.5 MED94.4%
KEV—78Microsoft Windows Information Disclosure Vulnerability82dCVE-2020-1040—94.4%
KEV—78Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability—CVE-2021-30554—94.4%
KEV—78Google Chromium WebGL Use-After-Free Vulnerability—CVE-2017-6744—94.3%
KEV—78Cisco IOS Software SNMP Remote Code Execution Vulnerability—CVE-2020-3950—94.3%
KEV—78VMware Multiple Products Privilege Escalation Vulnerability—CVE-2004-0210—94.3%
KEV—78Microsoft Windows Privilege Escalation Vulnerability—CVE-2025-244728.1 HIG94.3%
KEVR78Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability77dCVE-2026-20128—94.3%
KEV—78Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability—CVE-2018-0158—94.2%
KEV—78Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability—CVE-2022-24521—94.2%
KEVR78Microsoft Windows CLFS Driver Privilege Escalation Vulnerability—CVE-2024-38080—94.2%
KEV—78Microsoft Windows Hyper-V Privilege Escalation Vulnerability—CVE-2017-12234—94.2%
KEV—78Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability—CVE-2017-12233—94.2%
KEV—78Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability—CVE-2019-0344—94.2%
KEV—78SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability—CVE-2021-1879—94.2%
KEV—78Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability—CVE-2017-12237—94.2%
KEV—78Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability—CVE-2017-12231—94.2%
KEV—78Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability—CVE-2018-0154—94.2%
KEV—78Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability—