PULSEUnderground Intel

LIVE0signals / 24h

FEED

vulnKEV agrega CVE-2026-64849 — MLflow / MLflowvulnKEV agrega CVE-2026-33824 — Microsoft / Internet Key Exchange (IKE) Service ExtensionsvulnKEV agrega CVE-2026-59310 — Broadcom / VMware vCentervulnKEV agrega CVE-2026-55040 — Microsoft / SharePointvulnKEV agrega CVE-2026-65400 — Apple / macOSvulnKEV agrega CVE-2025-62593 — Ray-Project / Rayransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-CommercevulnKEV agrega CVE-2026-64849 — MLflow / MLflowvulnKEV agrega CVE-2026-33824 — Microsoft / Internet Key Exchange (IKE) Service ExtensionsvulnKEV agrega CVE-2026-59310 — Broadcom / VMware vCentervulnKEV agrega CVE-2026-55040 — Microsoft / SharePointvulnKEV agrega CVE-2026-65400 — Apple / macOSvulnKEV agrega CVE-2025-62593 — Ray-Project / Rayransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerce

CVE Watch363,254 in full archive

Vulnerabilities exploitable today

363,254in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,671

New KEV · 24H0

Exploit Today ≥ 701,610

Distribution · last window

Critical
2,901
High
12,396
Medium
7,640
Low
722

Filters

Window

Severity

Flags

Vulnerabilities316,721–316,760 · 363,254

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-178386.5 MED

——4Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)17d CVE-2024-49791—

——4——CVE-2026-32390—

——4——CVE-2025-10198—

——4——CVE-2025-12520—

——4——CVE-2022-50735—

——4——CVE-2023-0629—

——4——CVE-2022-20493—

——4——CVE-2025-50013—

——4——CVE-2025-50019—

——4——CVE-2025-50023—

——4——CVE-2025-48313—

——4——CVE-2026-32385—

——4——CVE-2026-178196.5 MED

——4Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)17d CVE-2025-50022—

——4——CVE-2026-396885.3 MED

——4Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through <= 1.3.9.27d CVE-2022-22148—

——4——CVE-2022-50859—

——4——CVE-2025-50025—

——4——CVE-2025-46229—

——4——CVE-2025-50016—

——4——CVE-2026-178286.5 MED

——4Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)17d CVE-2025-22262—

——4——CVE-2025-50027—

——4——CVE-2026-178356.5 MED

——4Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)17d CVE-2025-50021—

——4——CVE-2026-7134—

——4——CVE-2023-38746—

——4——CVE-2026-7133—

——4——CVE-2026-3875—

——4——CVE-2026-5396—

——4——CVE-2025-69749—

——4——CVE-2026-457393.1 LOW

——4Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser URL query string. If a user entered a sensitive header, such as `Authorization: Bearer <token>`, the value could become visible in browser history, copied links, and server/proxy/CDN access logs after a page reload or shared request. Version 0.315.4 patches the issue.29d CVE-2020-35514—

——4——CVE-2026-6220—

——4——CVE-2025-43735—

——4——CVE-2024-57910—

——4——CVE-2025-10151—

——4——CVE-2026-33865—

——4——CVE-2024-57908—