Vulnerabilities exploitable today
364,588in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,675
New KEV · 24H0
Exploit Today ≥ 701,620
Distribution · last window
- Critical2,405
- High10,150
- Medium5,058
- Low466
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-141147.5 HIG13.9%
——4Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)51dCVE-2025-68040—13.9%
——4——CVE-2026-3573—13.9%
——4——CVE-2026-9260—13.9%
——4——CVE-2026-8682—13.9%
——4——CVE-2024-27385—13.9%
——4——CVE-2026-391697.5 HIG13.9%
——4SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php.34dCVE-2024-26607—13.9%
——4——CVE-2024-526806.1 MED13.9%
——4EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn.52dCVE-2025-68014—13.9%
——4——CVE-2024-13350—13.9%
——4——CVE-2026-3992—13.9%
——4——CVE-2022-23717—13.9%
——4——CVE-2024-12516—13.9%
——4——CVE-2022-48643—13.9%
——4——CVE-2026-659437.5 HIG13.9%
——4Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.020dCVE-2026-116338.8 HIG13.9%
——4Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)34dCVE-2025-609317.5 HIG13.9%
——4An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.27dCVE-2025-30750—13.9%
——4——CVE-2022-48644—13.9%
——4——CVE-2025-25625—13.9%
——4——CVE-2026-6599—13.9%
——4——CVE-2022-27481—13.9%
——4——CVE-2022-50734—13.9%
——4——CVE-2026-713837.3 HIG13.8%
——4is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.6dCVE-2020-37158—13.8%
——4——CVE-2025-47289—13.8%
——4——CVE-2023-52471—13.8%
——4——CVE-2025-58821—13.8%
——4——CVE-2024-450207.8 HIG13.8%
——4In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a kernel verifier crash in stacksafe()
Daniel Hodges reported a kernel verifier crash when playing with sched-ext.
Further investigation shows that the crash is due to invalid memory access
in stacksafe(). More specifically, it is the following code:
if (exact != NOT_EXACT &&
old->stack[spi].slot_type[i % BPF_REG_SIZE] !=
cur->stack[spi].slot_type[i % BPF_REG_SIZE])
return false;
The 'i' iterates old->allocated_stack.
If cur->allocated_stack < old->allocated_stack the out-of-bound
access will happen.
To fix the issue add 'i >= cur->allocated_stack' check such that if
the condition is true, stacksafe() should fail. Otherwise,
cur->stack[spi].slot_type[i % BPF_REG_SIZE] memory access is legal.22dCVE-2025-1399—13.8%
——4——CVE-2025-29568—13.8%
——4——CVE-2021-46914—13.8%
——4——CVE-2025-69464.8 MED13.8%
——4A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.18dCVE-2026-45701—13.8%
——4Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.35dCVE-2025-4219—13.8%
——4——CVE-2019-11482—13.8%
——4——CVE-2026-23499—13.8%
——4——CVE-2025-27139—13.8%
——4——CVE-2026-1920—13.8%
——4——