Vulnerabilities exploitable today
367,144in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-44201—17.0%
——5——CVE-2023-25968—17.0%
——5——CVE-2026-21978—17.0%
——5——CVE-2024-26733—17.0%
——5——CVE-2025-11712—17.0%
——5——CVE-2024-502577.0 HIG17.0%
——5In the Linux kernel, the following vulnerability has been resolved:
netfilter: Fix use-after-free in get_info()
ip6table_nat module unload has refcnt warning for UAF. call trace is:
WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 module_put+0x6f/0x80
Modules linked in: ip6table_nat(-)
CPU: 1 UID: 0 PID: 379 Comm: ip6tables Not tainted 6.12.0-rc4-00047-gc2ee9f594da8-dirty #205
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),
BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014
RIP: 0010:module_put+0x6f/0x80
Call Trace:
<TASK>
get_info+0x128/0x180
do_ip6t_get_ctl+0x6a/0x430
nf_getsockopt+0x46/0x80
ipv6_getsockopt+0xb9/0x100
rawv6_getsockopt+0x42/0x190
do_sock_getsockopt+0xaa/0x180
__sys_getsockopt+0x70/0xc0
__x64_sys_getsockopt+0x20/0x30
do_syscall_64+0xa2/0x1a0
entry_SYSCALL_64_after_hwframe+0x77/0x7f
Concurrent execution of module unload and get_info() trigered the warning.
The root cause is as follows:
cpu0 cpu1
module_exit
//mod->state = MODULE_STATE_GOING
ip6table_nat_exit
xt_unregister_template
kfree(t)
//removed from templ_list
getinfo()
t = xt_find_table_lock
list_for_each_entry(tmpl, &xt_templates[af]...)
if (strcmp(tmpl->name, name))
continue; //table not found
try_module_get
list_for_each_entry(t, &xt_net->tables[af]...)
return t; //not get refcnt
module_put(t->me) //uaf
unregister_pernet_subsys
//remove table from xt_net list
While xt_table module was going away and has been removed from
xt_templates list, we couldnt get refcnt of xt_table->me. Check
module in xt_net->tables list re-traversal to fix it.27dCVE-2022-21174—17.0%
——5——CVE-2024-21912—17.0%
——5——CVE-2025-41661—17.0%
——5——CVE-2026-21970—17.0%
——5——CVE-2024-41602—17.0%
——5——CVE-2023-25038—17.0%
——5——CVE-2021-1219—17.0%
——5——CVE-2023-49749—17.0%
——5——CVE-2023-48331—17.0%
——5——CVE-2026-33948—17.0%
——5——CVE-2024-51948—17.0%
——5——CVE-2022-20221—17.0%
——5——CVE-2023-34327—17.0%
——5——CVE-2023-22693—17.0%
——5——CVE-2022-1256—17.0%
——5——CVE-2023-25474—17.0%
——5——CVE-2026-42736—17.0%
——5——CVE-2022-49448—17.0%
——5——CVE-2024-51950—17.0%
——5——CVE-2024-385767.0 HIG17.0%
——5In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the
buffer if there is a huge difference in jiffies difference. The situation
might seem improbable, but computers sometimes get very confused about
time, which can result in full-sized integers, and, in this case,
buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is
normally for signed integers. This is intentional for debugging purposes,
but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a
clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.27dCVE-2024-20313—17.0%
——5——CVE-2023-48281—17.0%
——5——CVE-2025-53524—17.0%
——5——CVE-2026-116888.8 HIG17.0%
——5Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)39dCVE-2025-5383—17.0%
——5——CVE-2023-34328—17.0%
——5——CVE-2022-36424—17.0%
——5——CVE-2023-23731—17.0%
——5——CVE-2023-25971—17.0%
——5——CVE-2024-51951—17.0%
——5——CVE-2025-43312—17.0%
——5——CVE-2024-34770—17.0%
——5——CVE-2025-69367—17.0%
——5——CVE-2026-791844.3 MED17.0%
——5Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)3d