Vulnerabilities exploitable today
401,031in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,971
- Medium14,886
- Low1,471
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-6819—87.3%
KEV—76Mozilla Firefox And Thunderbird Use-After-Free Vulnerability—CVE-2022-411257.8 HIG87.3%
KEV—76Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability72dCVE-2018-8589—87.3%
KEV—76Microsoft Win32k Privilege Escalation Vulnerability—CVE-2021-30666—87.2%
KEV—76Apple iOS WebKit Buffer Overflow Vulnerability—CVE-2021-29256—87.1%
KEV—76Arm Mali GPU Kernel Driver Use-After-Free Vulnerability—CVE-2024-32896—87.1%
KEV—76Android Pixel Privilege Escalation Vulnerability—CVE-2021-31199—87.0%
KEV—76Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability—CVE-2024-7262—86.9%
KEV—76Kingsoft WPS Office Path Traversal Vulnerability—CVE-2021-30983—86.9%
KEV—76Apple iOS and iPadOS Buffer Overflow Vulnerability—CVE-2024-116677.5 HIG86.9%
KEVR76Zyxel Multiple Firewalls Path Traversal Vulnerability77dCVE-2023-38606—86.7%
KEV—76Apple Multiple Products Kernel Unspecified Vulnerability—CVE-2025-396829.8 CRI86.7%
KEV—76Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability1dCVE-2021-386497.0 HIG86.7%
KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability72dCVE-2021-25337—86.3%
KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2025-619329.8 CRI86.1%
KEV—76Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability12dCVE-2020-16013—86.0%
KEV—76Google Chromium V8 Incorrect Implementation Vulnerabililty—CVE-2025-40602—86.0%
KEV—76SonicWall SMA1000 Missing Authorization Vulnerability—CVE-2020-16017—85.9%
KEV—76Google Chrome Use-After-Free Vulnerability—CVE-2021-386457.8 HIG85.9%
KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability72dCVE-2022-42948—85.8%
KEV—76Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability—CVE-2024-36971—85.7%
KEV—76Android Kernel Remote Code Execution Vulnerability—CVE-2026-456598.8 HIG85.7%
KEVR76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability90dCVE-2020-0878—85.7%
KEVR76Microsoft Edge and Internet Explorer Memory Corruption Vulnerability—CVE-2023-29492—85.7%
KEV—76Novi Survey Insecure Deserialization Vulnerability—CVE-2024-382267.3 HIG85.5%
KEV—76Microsoft Publisher Protection Mechanism Failure Vulnerability72dCVE-2020-24557—85.5%
KEV—76Trend Micro Multiple Products Improper Access Control Vulnerability—CVE-2025-59230—85.5%
KEV—76Microsoft Windows Improper Access Control Vulnerability—CVE-2022-410495.4 MED85.3%
KEV—76Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability72dCVE-2019-6223—85.3%
KEV—76Apple iOS and macOS Group Facetime Vulnerability—CVE-2021-31201—85.2%
KEV—76Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability—CVE-2023-35674—85.2%
KEV—76Android Framework Privilege Escalation Vulnerability—CVE-2026-593109.8 CRI84.9%
KEVR75Broadcom VMware vCenter Path Traversal Vulnerability63dCVE-2023-21492—84.8%
KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2022-0028—84.8%
KEV—75Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability—CVE-2026-6973—84.7%
KEV—75Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability—CVE-2025-622217.8 HIG84.5%
KEV—75Microsoft Windows Use After Free Vulnerability25dCVE-2026-72738.8 HIG84.5%
KEV—75Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability29dCVE-2025-32975—84.4%
KEV—75Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability—CVE-2025-39288.8 HIG84.4%
KEV—75Commvault Web Server Unspecified Vulnerability13dCVE-2023-20109—84.4%
KEV—75Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability—