Vulnerabilities exploitable today
366,836in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,360
- High9,604
- Medium5,457
- Low531
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-8088—15.6%
——5——CVE-2025-68028—15.6%
——5——CVE-2022-49000—15.6%
——5——CVE-2026-44424—15.6%
——5——CVE-2026-39843—15.6%
——5——CVE-2022-49016—15.6%
——5——CVE-2022-50816—15.6%
——5——CVE-2026-27386—15.6%
——5——CVE-2026-1247—15.6%
——5——CVE-2022-50731—15.6%
——5——CVE-2024-423067.8 HIG15.6%
——5In the Linux kernel, the following vulnerability has been resolved:
udf: Avoid using corrupted block bitmap buffer
When the filesystem block bitmap is corrupted, we detect the corruption
while loading the bitmap and fail the allocation with error. However the
next allocation from the same bitmap will notice the bitmap buffer is
already loaded and tries to allocate from the bitmap with mixed results
(depending on the exact nature of the bitmap corruption). Fix the
problem by using BH_verified bit to indicate whether the bitmap is valid
or not.25dCVE-2026-1922—15.6%
——5——CVE-2026-39524—15.6%
——5——CVE-2025-30627—15.6%
——5——CVE-2026-39503—15.6%
——5——CVE-2025-14886—15.6%
——5——CVE-2026-24415—15.6%
——5——CVE-2024-11185—15.6%
——5——CVE-2022-48961—15.6%
——5——CVE-2025-65090—15.6%
——5——CVE-2025-30941—15.6%
——5——CVE-2022-48970—15.6%
——5——CVE-2022-49004—15.6%
——5——CVE-2026-685878.6 HIG15.6%
——5SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints that return rendered block DOM without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a heading block ID to read full rendered content of publish-disabled documents that should be restricted.3dCVE-2026-753706.5 MED15.6%
——5An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying a crafted CAN message.4dCVE-2025-10250—15.6%
——5——CVE-2025-28989—15.6%
——5——CVE-2025-42934—15.6%
——5——CVE-2018-25163—15.6%
——5——CVE-2021-25127—15.6%
——5——CVE-2025-30637—15.6%
——5——CVE-2026-31868—15.6%
——5——CVE-2025-30942—15.6%
——5——CVE-2021-22747—15.6%
——5——CVE-2021-22746—15.6%
——5——CVE-2025-30319—15.6%
——5——CVE-2026-33469—15.6%
——5——CVE-2021-4112—15.6%
——5——CVE-2019-15877—15.6%
——5——CVE-2024-50058—15.6%
——5——