Vulnerabilities exploitable today
366,194in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,682
New KEV · 24H0
Exploit Today ≥ 701,626
Distribution · last window
- Critical2,415
- High10,330
- Medium5,246
- Low512
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-10914—15.2%
——5——CVE-2022-38774—15.2%
——5——CVE-2026-318935.5 MED15.2%
——5Tunnelblick is an open source graphic user interface for OpenVPN on macOS. In versions 3.3beta26 through 9.0beta01, any local user can read arbitrary root-owned files by exploiting a symlink following vulnerability in tunnelblick-helper, reachable through the world-accessible tunnelblickd Unix socket. The socket is configured with mode 0666, allowing any local user to connect. No authorization check is performed on the connecting client. The tunnelblick-helper process constructs a path to config.ovpn inside a user-controlled .tblk directory and reads it as root without symlink validation. An attacker can create a .tblk configuration with a symlinked config.ovpn pointing to any file and request tunnelblickd to read it. This issue has been fixed in versions 9.0beta02.34dCVE-2021-47361—15.2%
——5——CVE-2023-52854—15.2%
——5——CVE-2026-8689—15.2%
——5——CVE-2024-468318.4 HIG15.2%
——5In the Linux kernel, the following vulnerability has been resolved:
net: microchip: vcap: Fix use-after-free error in kunit test
This is a clear use-after-free error. We remove it, and rely on checking
the return code of vcap_del_rule.24dCVE-2021-0332—15.2%
——5——CVE-2026-528382.6 LOW15.2%
——5Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled" message through the booking settings page. That value is stored in the `disable_booking_message` setting via a rich-text editor and later passed directly to the public `booking_message` view without escaping or sanitization. An authenticated administrator can store HTML or JavaScript in this field, enable disabled-booking mode, and trigger stored XSS in every unauthenticated visitor who opens the public booking page. Version 1.6.0 fixes the issue.44dCVE-2022-48836—15.2%
——5——CVE-2025-64182—15.2%
——5——CVE-2026-22821—15.2%
——5——CVE-2025-53562—15.2%
——5——CVE-2026-199306.3 MED15.2%
——5A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is identified as 798e65356ede03c2812ab1a728f23fae34de5592. It is advisable to implement a patch to correct this issue.8dCVE-2025-69241—15.2%
——5——CVE-2026-8002—15.2%
——5——CVE-2021-34378—15.2%
——5——CVE-2024-45393—15.2%
——5——CVE-2023-0627—15.2%
——5——CVE-2026-33609—15.2%
——5——CVE-2021-1087—15.2%
——5——CVE-2025-30626—15.2%
——5——CVE-2026-712909.1 CRI15.2%
——5Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.
Please note the classic version of HttpClient is not affected by this vulnerability.
Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.10dCVE-2025-40915—15.2%
——5——CVE-2023-52784—15.2%
——5——CVE-2021-34376—15.2%
——5——CVE-2024-44262—15.2%
——5——CVE-2023-46674—15.2%
——5——CVE-2024-12921—15.2%
——5——CVE-2025-711507.5 HIG15.2%
——5In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix refcount leak when invalid session is found on session lookup
When a session is found but its state is not SMB2_SESSION_VALID, It
indicates that no valid session was found, but it is missing to decrement
the reference count acquired by the session lookup, which results in
a reference count leak. This patch fixes the issue by explicitly calling
ksmbd_user_session_put to release the reference to the session.29dCVE-2025-47709—15.2%
——5——CVE-2025-5983—15.2%
——5——CVE-2021-47649—15.2%
——5——CVE-2026-736508.2 HIG15.2%
——5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can leave executable content in optimized SVGs because it does not remove namespaced or prefixed script elements such as <svg:script> and, in versions 3 and 4, matches JavaScript URIs case sensitively. Applications that process untrusted SVG input with this plugin enabled and serve the result can allow scripts to execute when another user opens the SVG, exposing local storage or cookies. This issue is fixed in versions 2.8.3, 3.3.4, and 4.0.2.10dCVE-2021-47521—15.2%
——5——CVE-2026-157927.5 HIG15.2%
——5A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.28dCVE-2025-29867—15.2%
——5——CVE-2026-35240—15.2%
——5——CVE-2021-475007.8 HIG15.2%
——5In the Linux kernel, the following vulnerability has been resolved:
iio: mma8452: Fix trigger reference couting
The mma8452 driver directly assigns a trigger to the struct iio_dev. The
IIO core when done using this trigger will call `iio_trigger_put()` to drop
the reference count by 1.
Without the matching `iio_trigger_get()` in the driver the reference count
can reach 0 too early, the trigger gets freed while still in use and a
use-after-free occurs.
Fix this by getting a reference to the trigger before assigning it to the
IIO device.24dCVE-2025-12570—15.2%
——5——