Vulnerabilities exploitable today
401,031in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,971
- Medium14,886
- Low1,471
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-1214—72.4%
KEV—72Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability—CVE-2025-32701—72.4%
KEV—72Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability—CVE-2024-23296—72.3%
KEV—72Apple Multiple Products Memory Corruption Vulnerability—CVE-2026-20700—71.9%
KEV—72Apple Multiple Buffer Overflow Vulnerability—CVE-2025-213357.8 HIG71.9%
KEV—72Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability27dCVE-2023-41990—71.8%
KEV—72Apple Multiple Products Code Execution Vulnerability—CVE-2025-24983—71.6%
KEV—71Microsoft Windows Win32k Use-After-Free Vulnerability—CVE-2020-0069—71.5%
KEV—71Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability—CVE-2025-399647.8 HIG71.4%
KEV—71Linux Kernel Race Condition Vulnerability2dCVE-2024-53150—71.2%
KEV—71Linux Kernel Out-of-Bounds Read Vulnerability—CVE-2025-35939—71.1%
KEV—71Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability—CVE-2025-383527.8 HIG70.9%
KEV—71Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability43dCVE-2026-480279.8 CRI70.8%
KEVR71Nx Console Embedded Malicious Code Vulnerability7dCVE-2024-49035—70.0%
KEV—71Microsoft Partner Center Improper Access Control Vulnerability—CVE-2026-887728.1 HIG70.0%
KEV—71Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability23dCVE-2023-43467.5 HIG69.9%
KEV—71KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability97dCVE-2026-21385—69.9%
KEV—71Qualcomm Multiple Chipsets Memory Corruption Vulnerability—CVE-2026-454984.0 MED69.3%
KEV—71Microsoft Defender Denial of Service Vulnerability90dCVE-2026-1024899.8 CRI69.1%
KEV—71Zammad GmbH Zammad Session Fixation Vulnerability11dCVE-2026-869508.8 HIG68.8%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability20dCVE-2023-26083—68.2%
KEV—70Arm Mali GPU Kernel Driver Information Disclosure Vulnerability—CVE-2026-03227.2 HIG68.1%
KEV—70Palo Alto Networks PAN-OS Code Injection Vulnerability6dCVE-2025-593749.8 CRI67.6%
KEV—70ASUS Live Update Embedded Malicious Code Vulnerability25dCVE-2025-432004.2 MED67.5%
KEV—70Apple Multiple Products Unspecified Vulnerability27dCVE-2026-1027649.8 CRI67.2%
KEV—70BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability4dCVE-2023-36851—65.7%
KEV—70Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2023-4211—65.1%
KEV—70Arm Mali GPU Kernel Driver Use-After-Free Vulnerability—CVE-2022-22674—64.8%
KEV—69Apple macOS Out-of-Bounds Read Vulnerability—CVE-2026-887719.8 CRI64.7%
KEV—69Citrix NetScaler Improper Input Validation Vulnerability22dCVE-2025-616246.0 MED64.6%
KEV—69Fortinet Multiple Products Path Traversal Vulnerability4dCVE-2021-25369—64.5%
KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2026-3910—64.2%
KEV—69Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability—CVE-2022-42827—64.2%
KEV—69Apple iOS and iPadOS Out-of-Bounds Write Vulnerability—CVE-2022-22706—64.1%
KEV—69Arm Mali GPU Kernel Driver Unspecified Vulnerability—CVE-2026-9395210.0 CRI64.1%
KEV—69Arista VeloCloud Orchestrator Improper Input Validation Vulnerability28dCVE-2021-1048—63.9%
KEV—69Android Kernel Use-After-Free Vulnerability—CVE-2026-45321—63.8%
KEVR69TanStack Unspecified Vulnerability—CVE-2026-672796.5 MED63.1%
KEV—69Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability25dCVE-2021-23874—63.0%
KEV—69McAfee Total Protection (MTP) Improper Privilege Management Vulnerability—CVE-2025-27038—62.7%
KEV—69Qualcomm Multiple Chipsets Use-After-Free Vulnerability—