Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,504
- High15,974
- Medium14,897
- Low1,475
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-41765—99.3%
——30——CVE-2019-7816—99.3%
——30——CVE-2007-3221—99.3%
——30——CVE-2020-13383—99.3%
——30——CVE-2012-5357—99.3%
——30——CVE-2022-0435—99.3%
——30——CVE-2022-34713—99.3%
KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2016-6662—99.3%
——30——CVE-2023-46727—99.3%
——30——CVE-2024-2194—99.3%
——30——CVE-2013-4547—99.3%
——30——CVE-2015-8651—99.3%
KEV—80Adobe Flash Player Integer Overflow Vulnerability—CVE-2005-0803—99.3%
——30——CVE-2010-3970—99.3%
——30——CVE-2005-1099—99.3%
——30——CVE-2007-3237—99.3%
——30——CVE-2012-1447—99.3%
——30——CVE-2017-18369—99.3%
——30——CVE-2008-1611—99.3%
——30——CVE-2021-22992—99.3%
——30——CVE-2025-134869.8 CRI99.3%
——30The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function. This is due to the function accepting user input and then passing that through call_user_func_array(). This makes it possible for unauthenticated attackers to execute arbitrary code on the server, which can be leveraged to inject backdoors or create new administrative user accounts.3dCVE-2012-4957—99.3%
——30——CVE-2014-0783—99.3%
——30——CVE-2025-30676—99.3%
——30——CVE-2017-8548—99.3%
——30——CVE-2013-5014—99.3%
——30——CVE-2020-0610—99.3%
——30——CVE-2006-6251—99.3%
——30——CVE-2023-3765—99.3%
——30——CVE-2017-14494—99.3%
——30——CVE-2004-0396—99.3%
——30——CVE-2018-8397—99.3%
——30——CVE-2026-23744—99.3%
——30——CVE-2020-24949—99.3%
——30——CVE-2006-3524—99.3%
——30——CVE-2024-23115—99.3%
——30——CVE-2008-1602—99.3%
——30——CVE-2014-1635—99.3%
——30——CVE-2022-41034—99.3%
——30——CVE-2013-3628—99.3%
——30——