Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,503
- High15,943
- Medium14,895
- Low1,473
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2017-11873—99.4%
——30——CVE-2014-0257—99.4%
——30——CVE-2017-18044—99.4%
——30——CVE-2021-35215—99.4%
——30——CVE-2005-0260—99.4%
——30——CVE-2020-10770—99.4%
——30——CVE-2023-4347—99.4%
——30——CVE-2002-0661—99.4%
——30——CVE-2023-1177—99.4%
——30——CVE-2010-3654—99.4%
——30——CVE-2013-6117—99.4%
——30——CVE-2023-3368—99.4%
——30——CVE-2023-22463—99.4%
——30——CVE-2023-26801—99.4%
——30——CVE-2005-0241—99.4%
——30——CVE-2012-0003—99.4%
——30——CVE-2004-0627—99.4%
——30——CVE-2011-3658—99.4%
——30——CVE-2011-1567—99.4%
——30——CVE-2007-6204—99.4%
——30——CVE-2021-22873—99.4%
——30——CVE-2023-5074—99.4%
——30——CVE-2022-0364—99.4%
——30——CVE-2009-4484—99.4%
——30——CVE-2021-39836—99.4%
——30——CVE-2026-550409.1 CRI99.4%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability63dCVE-2012-4284—99.4%
——30——CVE-2025-220377.5 HIG99.4%
——30In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in alloc_preauth_hash()
The Client send malformed smb2 negotiate request. ksmbd return error
response. Subsequently, the client can send smb2 session setup even
thought conn->preauth_info is not allocated.
This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore
session setup request if smb2 negotiate phase is not complete.13dCVE-2009-4188—99.4%
——30——CVE-2024-27292—99.4%
——30——CVE-2005-0560—99.4%
——30——CVE-2008-1117—99.4%
——30——CVE-2024-38472—99.4%
——30——CVE-2019-0568—99.4%
——30——CVE-2014-0307—99.4%
——30——CVE-2019-17444—99.4%
——30——CVE-2020-7388—99.4%
——30——CVE-2018-7490—99.4%
——30——CVE-2022-30287—99.4%
——30——CVE-2016-00348.8 HIG99.4%
KEVR80Microsoft Silverlight Runtime Remote Code Execution Vulnerability68d