Vulnerabilities exploitable today
376,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,713
New KEV · 24H0
Exploit Today ≥ 701,646
Distribution · last window
- Critical2,381
- High8,758
- Medium6,799
- Low733
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-110688.8 HIG29.1%
——9Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)57dCVE-2026-50934.3 MED29.1%
——9The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to a missing capability check on the 'gspb_update_global_wp_settings' function that only verifies the 'edit_posts' capability instead of requiring administrative privileges. This makes it possible for authenticated attackers, with contributor-level access and above, to modify global WordPress theme color settings site-wide, leading to site defacement.24dCVE-2026-99628.8 HIG29.1%
——9Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)59dCVE-2025-47041—29.1%
——9——CVE-2025-46999—29.1%
——9——CVE-2025-40595—29.1%
——9——CVE-2025-41064—29.1%
——9——CVE-2025-46990—29.1%
——9——CVE-2024-9446—29.1%
——9——CVE-2025-47063—29.1%
——9——CVE-2025-47070—29.1%
——9——CVE-2025-5506—29.1%
——9——CVE-2025-47002—29.1%
——9——CVE-2024-1377—29.1%
——9——CVE-2017-4943—29.1%
——9——CVE-2025-46976—29.1%
——9——CVE-2024-12100—29.1%
——9——CVE-2025-46981—29.1%
——9——CVE-2025-47069—29.1%
——9——CVE-2023-49119—29.1%
——9——CVE-2024-43443—29.1%
——9——CVE-2024-11287—29.1%
——9——CVE-2025-47039—29.1%
——9——CVE-2025-46978—29.1%
——9——CVE-2024-12407—29.1%
——9——CVE-2026-1675—29.1%
——9——CVE-2024-140318.1 HIG29.1%
——9Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.
Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.55dCVE-2025-60313—29.1%
——9——CVE-2025-47052—29.1%
——9——CVE-2026-478769.3 CRI29.1%
——9VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.49dCVE-2026-610189.8 CRI29.1%
——9Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).27dCVE-2014-0442—29.1%
——9——CVE-2014-4206—29.1%
——9——CVE-2025-47014—29.1%
——9——CVE-2024-12221—29.1%
——9——CVE-2023-44689—29.1%
——9——CVE-2024-27773—29.1%
——9——CVE-2025-46986—29.1%
——9——CVE-2025-47017—29.1%
——9——CVE-2024-6200—29.1%
——9——