Vulnerabilities exploitable today
365,446in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,682
New KEV · 24H0
Exploit Today ≥ 701,626
Distribution · last window
- Critical2,314
- High9,956
- Medium4,885
- Low457
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-36888—14.5%
——4——CVE-2025-521648.2 HIG14.5%
——4Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.54dCVE-2025-62219—14.5%
——4——CVE-2026-437534.6 MED14.5%
——4An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.30dCVE-2025-24754—14.5%
——4——CVE-2024-44156—14.5%
——4——CVE-2024-53156—14.5%
——4——CVE-2025-7819—14.5%
——4——CVE-2024-23220—14.5%
——4——CVE-2026-53609—14.5%
——4——CVE-2023-45174—14.5%
——4——CVE-2024-53103—14.5%
——4——CVE-2026-164804.3 MED14.5%
——4IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.9dCVE-2025-13504—14.5%
——4——CVE-2024-56584—14.5%
——4——CVE-2026-39447—14.5%
——4——CVE-2026-179384.3 MED14.5%
——4Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)24dCVE-2025-13048—14.5%
——4——CVE-2024-32637—14.5%
——4——CVE-2018-25197—14.5%
——4——CVE-2026-42800—14.5%
——4——CVE-2025-0161—14.5%
——4——CVE-2025-7815—14.5%
——4——CVE-2026-1910—14.5%
——4——CVE-2026-54888—14.5%
——4Uncontrolled Recursion vulnerability in leandrocp mdex allows denial of service via deeply nested Markdown input.
mdex converts between an Elixir %MDEx.Document{} struct and Comrak's internal AST using two mutually recursive Rust functions, ex_document_to_comrak_ast and comrak_ast_to_ex_document, in the NIF source file document.rs. Neither function enforces a maximum nesting depth, so the recursion depth is bounded only by the structure of the input. An attacker who can get a Markdown document rendered (for example through MDEx.parse_document!/1 or MDEx.to_html/1) can supply a document with thousands of nested block quotes, which drives unbounded recursion across the NIF boundary and exhausts the native C stack.
Because the resulting stack overflow is an uncatchable SIGSEGV raised inside a NIF, it cannot be contained by the Erlang runtime. It terminates the operating system process running the BEAM, killing every Elixir and Erlang process on the node, not just the caller that triggered the render. No authentication or special privileges are required.
The vulnerable conversion code was extracted from mdex into the separate mdex_native package starting in mdex 0.12.3. This issue affects mdex from 0.3.0 before 0.12.3 and mdex_native from 0.1.0 before 0.2.3.58dCVE-2025-7458—14.5%
——4——CVE-2026-559915.9 MED14.5%
——4In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire Unbound process using a single DNS-over-QUIC (DoQ) connection and one normal DNS query. This is caused by an erroneous error value passed to libngtcp2. When 'ngtcp2_conn_writev_stream()' returns 'NGTCP2_ERR_STREAM_DATA_BLOCKED', Unbound continues to call 'ngtcp2_ccerr_set_application_error()' with a '-1' error value. The 'int' literal '-1' is implicitly converted to the function's 'uint64_t error_code' parameter as '0xFFFFFFFFFFFFFFFF'. The follow-on 'ngtcp2_conn_write_connection_close()' serialises that value as a QUIC variable-length integer; because '2^64-1' exceeds the 62-bit varint ceiling, 'ngtcp2_put_uvarintlen()' fails 'assert(n < 4611686018427387904ULL)' and the whole resolver process aborts. A remote, unauthenticated DoQ client can trigger this deterministically with a single QUIC connection by advertising 'initial_max_stream_data_bidi_local = 1' in its transport parameters and sending one DoQ query without ever reading the stream.34dCVE-2026-667525.4 MED14.5%
——4tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard Content-Length. Attackers can exploit the discrepancy between tiny_http's improper Transfer-Encoding parsing and a correctly-implemented front-end proxy to produce two distinct interpretations of a single byte stream, enabling request smuggling, and can additionally send non-chunked bodies with non-chunked Transfer-Encoding values to cause failed body reads that tie up connections and consume worker threads without signaling errors to clients.28dCVE-2026-48838—14.5%
——4——CVE-2018-25188—14.5%
——4——CVE-2018-25189—14.5%
——4——CVE-2022-49692—14.5%
——4——CVE-2025-22722—14.5%
——4——CVE-2024-44280—14.5%
——4——CVE-2022-20930—14.5%
——4——CVE-2025-31226—14.5%
——4——CVE-2021-29218—14.5%
——4——CVE-2025-7786—14.5%
——4——CVE-2026-1901—14.5%
——4——CVE-2024-49827—14.5%
——4——