Vulnerabilities exploitable today
365,633in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,682
New KEV · 24H0
Exploit Today ≥ 701,626
Distribution · last window
- Critical2,365
- High10,107
- Medium5,002
- Low469
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-41174—14.8%
——4——CVE-2026-281489.8 CRI14.8%
——4Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.13dCVE-2026-76603—14.8%
——4Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.3dCVE-2024-46731—14.8%
——4——CVE-2022-40103—14.8%
——4——CVE-2025-13118—14.8%
——4——CVE-2026-10868—14.8%
——4A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit(). When processing edit requests, the application accepted a user-controlled User.id value from request data. An authenticated attacker could craft a modified request containing another user identifier, potentially causing updates to be applied to an unintended user account. Depending on the editable fields and the attacker’s privileges, this could allow unauthorized modification of user account attributes and impact account integrity.
The issue was addressed by explicitly removing the User.id field from request data before processing the user edit operation.36dCVE-2026-42350—14.8%
——4Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable to open redirect in UI OIDC login flow via the redirectTo query parameter. This issue has been patched in versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2.34dCVE-2021-33147—14.8%
——4——CVE-2026-76600—14.8%
——4Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks.3dCVE-2026-627587.8 HIG14.8%
——4Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-6756—14.8%
——4——CVE-2022-48794—14.8%
——4——CVE-2023-21108—14.8%
——4——CVE-2000-0789—14.8%
——4——CVE-2024-37062—14.8%
——4——CVE-2003-1376—14.8%
——4——CVE-2017-18310—14.8%
——4——CVE-2024-37064—14.8%
——4——CVE-2023-44161—14.8%
——4——CVE-2023-52831—14.8%
——4——CVE-2026-27920—14.8%
——4——CVE-2024-10242—14.8%
——4——CVE-2023-42941—14.8%
——4——CVE-2023-525747.8 HIG14.8%
——4In the Linux kernel, the following vulnerability has been resolved:
team: fix null-ptr-deref when team device type is changed
Get a null-ptr-deref bug as follows with reproducer [1].
BUG: kernel NULL pointer dereference, address: 0000000000000228
...
RIP: 0010:vlan_dev_hard_header+0x35/0x140 [8021q]
...
Call Trace:
<TASK>
? __die+0x24/0x70
? page_fault_oops+0x82/0x150
? exc_page_fault+0x69/0x150
? asm_exc_page_fault+0x26/0x30
? vlan_dev_hard_header+0x35/0x140 [8021q]
? vlan_dev_hard_header+0x8e/0x140 [8021q]
neigh_connected_output+0xb2/0x100
ip6_finish_output2+0x1cb/0x520
? nf_hook_slow+0x43/0xc0
? ip6_mtu+0x46/0x80
ip6_finish_output+0x2a/0xb0
mld_sendpack+0x18f/0x250
mld_ifc_work+0x39/0x160
process_one_work+0x1e6/0x3f0
worker_thread+0x4d/0x2f0
? __pfx_worker_thread+0x10/0x10
kthread+0xe5/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x34/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
[1]
$ teamd -t team0 -d -c '{"runner": {"name": "loadbalance"}}'
$ ip link add name t-dummy type dummy
$ ip link add link t-dummy name t-dummy.100 type vlan id 100
$ ip link add name t-nlmon type nlmon
$ ip link set t-nlmon master team0
$ ip link set t-nlmon nomaster
$ ip link set t-dummy up
$ ip link set team0 up
$ ip link set t-dummy.100 down
$ ip link set t-dummy.100 master team0
When enslave a vlan device to team device and team device type is changed
from non-ether to ether, header_ops of team device is changed to
vlan_header_ops. That is incorrect and will trigger null-ptr-deref
for vlan->real_dev in vlan_dev_hard_header() because team device is not
a vlan device.
Cache eth_header_ops in team_setup(), then assign cached header_ops to
header_ops of team net device when its type is changed from non-ether
to ether to fix the bug.23dCVE-2023-30351—14.8%
——4——CVE-2026-24430—14.8%
——4——CVE-2025-5416—14.8%
——4——CVE-2026-144065.9 MED14.8%
——4Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)56dCVE-2023-44160—14.8%
——4——CVE-2026-25805—14.8%
——4——CVE-2024-47734—14.8%
——4——CVE-2025-37148—14.8%
——4——CVE-2026-7428—14.8%
——4——CVE-2026-77143—14.8%
——4——CVE-2022-40679—14.8%
——4——CVE-2026-77142—14.8%
——4——CVE-2026-77141—14.8%
——4——CVE-2018-11859—14.8%
——4——CVE-2024-37065—14.8%
——4——