Vulnerabilities exploitable today
366,194in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,682
New KEV · 24H0
Exploit Today ≥ 701,626
Distribution · last window
- Critical2,415
- High10,330
- Medium5,246
- Low512
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-25423—15.1%
——5——CVE-2025-23108—15.1%
——5——CVE-2021-3458—15.1%
——5——CVE-2024-13577—15.1%
——5——CVE-2024-360197.8 HIG15.1%
——5In the Linux kernel, the following vulnerability has been resolved:
regmap: maple: Fix cache corruption in regcache_maple_drop()
When keeping the upper end of a cache block entry, the entry[] array
must be indexed by the offset from the base register of the block,
i.e. max - mas.index.
The code was indexing entry[] by only the register address, leading
to an out-of-bounds access that copied some part of the kernel
memory over the cache contents.
This bug was not detected by the regmap KUnit test because it only
tests with a block of registers starting at 0, so mas.index == 0.24dCVE-2024-13587—15.1%
——5——CVE-2024-26668—15.1%
——5——CVE-2025-30624—15.1%
——5——CVE-2024-566817.8 HIG15.1%
——5In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - add error check in the ahash_hmac_init function
The ahash_init functions may return fails. The ahash_hmac_init should
not return ok when ahash_init returns error. For an example, ahash_init
will return -ENOMEM when allocation memory is error.24dCVE-2026-33653—15.1%
——5——CVE-2026-786796.5 MED15.1%
——5GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file=<path> to read arbitrary files, with contents returned in the annotated tag message.7hCVE-2025-11080—15.1%
——5——CVE-2024-48425—15.1%
——5——CVE-2023-42241—15.1%
——5——CVE-2023-469459.1 CRI15.1%
——5QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request34dCVE-2026-768467.5 HIG15.1%
——5Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets. Attackers with page-edit permission can use config.get() or config.toArray() in Twig templates to retrieve sensitive values like system.cache.redis.password when config_access is enabled.7hCVE-2025-49272—15.1%
——5——CVE-2025-28996—15.1%
——5——CVE-2026-26004—15.1%
——5——CVE-2016-20044—15.1%
——5——CVE-2025-70040—15.1%
——5——CVE-2026-733919.3 CRI15.1%
——5Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.7dCVE-2026-1454—15.1%
——5——CVE-2026-736088.6 HIG15.1%
——5SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization checks (no CheckReadonly, no publish-access or encrypted-notebook gating). Given a database identifier taken from a published page and a keyword, an anonymous reader can query the endpoint to retrieve matching database row content, including rows that publish filters (FilterAttributeViewByPublishAccess) would otherwise withhold. No released stable version is affected.1dCVE-2017-18329—15.1%
——5——CVE-2021-47073—15.1%
——5——CVE-2026-72698—15.1%
——5——CVE-2024-6974—15.1%
——5——CVE-2025-453146.1 MED15.1%
——5A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function.54dCVE-2024-13573—15.1%
——5——CVE-2021-21595—15.1%
——5——CVE-2024-13455—15.1%
——5——CVE-2024-13581—15.1%
——5——CVE-2024-13315—15.1%
——5——CVE-2021-469777.8 HIG15.1%
——5In the Linux kernel, the following vulnerability has been resolved:
KVM: VMX: Disable preemption when probing user return MSRs
Disable preemption when probing a user return MSR via RDSMR/WRMSR. If
the MSR holds a different value per logical CPU, the WRMSR could corrupt
the host's value if KVM is preempted between the RDMSR and WRMSR, and
then rescheduled on a different CPU.
Opportunistically land the helper in common x86, SVM will use the helper
in a future commit.24dCVE-2025-53997—15.1%
——5——CVE-2025-48150—15.1%
——5——CVE-2023-41088—15.1%
——5——CVE-2025-54596—15.1%
——5——CVE-2021-469937.8 HIG15.1%
——5In the Linux kernel, the following vulnerability has been resolved:
sched: Fix out-of-bound access in uclamp
Util-clamp places tasks in different buckets based on their clamp values
for performance reasons. However, the size of buckets is currently
computed using a rounding division, which can lead to an off-by-one
error in some configurations.
For instance, with 20 buckets, the bucket size will be 1024/20=51. A
task with a clamp of 1024 will be mapped to bucket id 1024/51=20. Sadly,
correct indexes are in range [0,19], hence leading to an out of bound
memory access.
Clamp the bucket id to fix the issue.24d