Vulnerabilities exploitable today
401,031in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,971
- Medium14,886
- Low1,471
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-59689—79.0%
KEV—74Libraesva Email Security Gateway Command Injection Vulnerability—CVE-2026-765049.8 CRI78.4%
KEV—74Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability18dCVE-2025-32709—78.4%
KEV—74Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability—CVE-2018-193227.8 HIG78.4%
KEVR74GIGABYTE Multiple Products Code Execution Vulnerability69dCVE-2026-3490910.0 CRI78.1%
KEV—73Ubiquiti UniFi OS Path Traversal Vulnerability90dCVE-2024-7694—78.1%
KEV—73TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability—CVE-2019-1129—78.0%
KEVR73Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability—CVE-2025-15556—77.8%
KEV—73Notepad++ Download of Code Without Integrity Check Vulnerability—CVE-2025-22226—77.8%
KEV—73VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability—CVE-2025-215904.4 MED77.3%
KEV—73Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability20dCVE-2024-21287—77.2%
KEV—73Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability—CVE-2026-654009.8 CRI77.2%
KEV—73Apple macOS Improper Authentication Vulnerability36dCVE-2019-11307.8 HIG77.1%
KEVR73Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability70dCVE-2025-485958.4 HIG77.1%
KEV—73Android Framework Integer Overflow Vulnerability91dCVE-2025-48700—77.0%
KEV—73Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability—CVE-2026-725309.0 CRI76.7%
KEV—73TrueConf Server Code Injection Vulnerability61dCVE-2026-33634—76.6%
KEV—73Aquasecurity Trivy Embedded Malicious Code Vulnerability—CVE-2023-28229—76.5%
KEV—73Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability—CVE-2024-39891—76.4%
KEV—73Twilio Authy Information Disclosure Vulnerability—CVE-2025-312778.8 HIG76.3%
KEV—73Apple Multiple Products Buffer Overflow Vulnerability30dCVE-2024-38107—75.9%
KEV—73Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability—CVE-2025-24989—75.7%
KEV—73Microsoft Power Pages Improper Access Control Vulnerability—CVE-2026-338249.8 CRI75.7%
KEV—73Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability26dCVE-2020-11261—75.5%
KEV—73Qualcomm Multiple Chipsets Improper Input Validation Vulnerability—CVE-2026-21514—75.2%
KEV—73Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability—CVE-2021-41357—75.2%
KEV—73Microsoft Win32k Privilege Escalation Vulnerability—CVE-2021-40450—75.2%
KEV—73Microsoft Win32k Privilege Escalation Vulnerability—CVE-2026-765199.8 CRI75.0%
KEV—73Cisco Secure Email Gateway Relative Path Traversal Vulnerability6dCVE-2025-21418—75.0%
KEV—72Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability—CVE-2025-21334—74.9%
KEV—72Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability—CVE-2025-22224—74.9%
KEV—72VMware ESXi and Workstation TOCTOU Race Condition Vulnerability—CVE-2026-672778.2 HIG74.9%
KEV—72MikroTik RouterOS Missing Authentication for Critical Function Vulnerability40dCVE-2019-87208.8 HIG74.8%
KEV—72WebKitGTK Memory Corruption Vulnerability13dCVE-2021-1905—74.6%
KEV—72Qualcomm Multiple Chipsets Use-After-Free Vulnerability—CVE-2026-969518.8 HIG74.1%
KEV—72Microsoft Windows Command Injection Vulnerability5dCVE-2013-2597—73.9%
KEV—72Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability—CVE-2024-23225—73.6%
KEV—72Apple Multiple Products Memory Corruption Vulnerability—CVE-2021-36742—73.6%
KEV—72Trend Micro Multiple Products Improper Input Validation Vulnerability—CVE-2026-725299.8 CRI73.3%
KEV—72TrueConf Server Missing Authentication for Critical Function Vulnerability61dCVE-2023-20963—73.3%
KEV—72Android Framework Privilege Escalation Vulnerability—