Vulnerabilities exploitable today
360,835in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,665
New KEV · 24H0
Exploit Today ≥ 701,607
Distribution · last window
- Critical2,641
- High11,456
- Medium7,085
- Low644
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-46541—12.1%
——4——CVE-2025-31464—12.1%
——4——CVE-2025-47665—12.1%
——4——CVE-2023-44994—12.1%
——4——CVE-2024-531267.1 HIG12.1%
——4In the Linux kernel, the following vulnerability has been resolved:
vdpa: solidrun: Fix UB bug with devres
In psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to
pcim_iomap_regions() is placed on the stack. Neither
pcim_iomap_regions() nor the functions it calls copy that string.
Should the string later ever be used, this, consequently, causes
undefined behavior since the stack frame will by then have disappeared.
Fix the bug by allocating the strings on the heap through
devm_kasprintf().14dCVE-2025-46804—12.1%
——4——CVE-2023-45643—12.1%
——4——CVE-2026-3284—12.1%
——4——CVE-2024-42156—12.1%
——4——CVE-2023-41876—12.1%
——4——CVE-2023-39917—12.1%
——4——CVE-2022-31600—12.1%
——4——CVE-2025-5555—12.1%
——4——CVE-2021-37101—12.1%
——4——CVE-2026-43583—12.1%
——4——CVE-2026-730354.3 MED12.1%
——4npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --format homepage or --format repo option, unfiltered escape sequences are written directly to the terminal, enabling malicious output manipulation or other terminal-dependent effects.7dCVE-2023-45653—12.1%
——4——CVE-2024-6151—12.1%
——4——CVE-2026-116907.5 HIG12.1%
——4Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)26dCVE-2023-45748—12.1%
——4——CVE-2025-27012—12.1%
——4——CVE-2026-3733—12.0%
——4——CVE-2024-579527.1 HIG12.1%
——4In the Linux kernel, the following vulnerability has been resolved:
Revert "libfs: fix infinite directory reads for offset dir"
The current directory offset allocator (based on mtree_alloc_cyclic)
stores the next offset value to return in octx->next_offset. This
mechanism typically returns values that increase monotonically over
time. Eventually, though, the newly allocated offset value wraps
back to a low number (say, 2) which is smaller than other already-
allocated offset values.
Yu Kuai <yukuai3@huawei.com> reports that, after commit 64a7ce76fb90
("libfs: fix infinite directory reads for offset dir"), if a
directory's offset allocator wraps, existing entries are no longer
visible via readdir/getdents because offset_readdir() stops listing
entries once an entry's offset is larger than octx->next_offset.
These entries vanish persistently -- they can be looked up, but will
never again appear in readdir(3) output.
The reason for this is that the commit treats directory offsets as
monotonically increasing integer values rather than opaque cookies,
and introduces this comparison:
if (dentry2offset(dentry) >= last_index) {
On 64-bit platforms, the directory offset value upper bound is
2^63 - 1. Directory offsets will monotonically increase for millions
of years without wrapping.
On 32-bit platforms, however, LONG_MAX is 2^31 - 1. The allocator
can wrap after only a few weeks (at worst).
Revert commit 64a7ce76fb90 ("libfs: fix infinite directory reads for
offset dir") to prepare for a fix that can work properly on 32-bit
systems and might apply to recent LTS kernels where shmem employs
the simple_offset mechanism.14dCVE-2018-7957—12.1%
——4——CVE-2021-20434—12.1%
——4——CVE-2023-41858—12.1%
——4——CVE-2024-53075—12.1%
——4——CVE-2021-41221—12.1%
——4——CVE-2025-46523—12.1%
——4——CVE-2023-45654—12.1%
——4——CVE-2021-35530—12.1%
——4——CVE-2025-25018—12.1%
——4——CVE-2026-685787.5 HIG12.1%
——4ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via the query tool.15dCVE-2026-1014—12.1%
——4——CVE-2021-47975—12.1%
——4——CVE-2024-54515—12.1%
——4——CVE-2024-38631—12.1%
——4——CVE-2023-52226—12.1%
——4——CVE-2023-41851—12.1%
——4——CVE-2026-33136—12.1%
——4——