Vulnerabilities exploitable today
371,767in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,703
New KEV · 24H0
Exploit Today ≥ 701,643
Distribution · last window
- Critical2,231
- High8,285
- Medium6,315
- Low606
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-649057.8 HIG22.8%
——7Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.27dCVE-2024-37942—22.8%
——7——CVE-2022-2171—22.8%
——7——CVE-2026-58778.8 HIG22.8%
——7Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)48dCVE-2010-3244—22.8%
——7——CVE-2010-5150—22.7%
——7——CVE-2026-139646.5 MED22.7%
——7Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)70dCVE-2021-3941—22.7%
——7——CVE-2026-134627.5 HIG22.7%
——7PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.63dCVE-2022-27578—22.7%
——7——CVE-2022-29973—22.7%
——7——CVE-2010-5152—22.7%
——7——CVE-2024-36450—22.7%
——7——CVE-2024-4030—22.7%
——7——CVE-2016-7066—22.7%
——7——CVE-2024-22715—22.7%
——7——CVE-2026-595039.1 CRI22.7%
——7: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.13dCVE-2025-35431—22.7%
——7——CVE-2026-200135.8 MED22.7%
——7A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network.
This vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to manually reload.30dCVE-2026-790056.5 MED22.7%
——7Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)14dCVE-2026-190807.5 HIG22.7%
——7Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting.
This issue affects Menulux Portal: before 20260903211448.2dCVE-2026-542443.5 LOW22.7%
——7Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.0 and 6.20.3, the Live Preview endpoint for existing entries and terms in src/Http/Controllers/CP/PreviewController.php only checked view authorization, but it accepts and renders caller-supplied field values. A Control Panel user with view but not edit permission could therefore submit content they were not authorized to author and generate a shareable Live Preview URL rendering it. This issue is fixed in versions 5.74.0 and 6.20.3.49dCVE-2010-5158—22.7%
——7——CVE-2025-13692—22.7%
——7——CVE-2024-13551—22.7%
——7——CVE-2025-1617—22.7%
——7——CVE-2026-109228.8 HIG22.7%
——7Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via malicious network traffic. (Chromium security severity: High)50dCVE-2009-1359—22.7%
——7——CVE-2026-790338.8 HIG22.7%
——7Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)15dCVE-2016-7777—22.7%
——7——CVE-2024-9057—22.7%
——7——CVE-2025-54461—22.7%
——7——CVE-2026-595049.1 CRI22.7%
——7: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.13dCVE-2026-54271—22.7%
——7——CVE-2020-8716—22.7%
——7——CVE-2026-792308.8 HIG22.7%
——7Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)10dCVE-2025-156864.3 MED22.7%
——7A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.29dCVE-2010-5170—22.7%
——7——CVE-2026-708436.8 MED22.7%
——7Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).17dCVE-2026-32693—22.7%
——7——