Vulnerabilities exploitable today
359,665in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,665
New KEV · 24H0
Exploit Today ≥ 701,608
Distribution · last window
- Critical2,517
- High11,189
- Medium7,120
- Low649
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-53250—11.0%
——3——CVE-2026-6313—11.0%
——3——CVE-2026-3873—11.0%
——3——CVE-2026-40479—11.0%
——3——CVE-2022-25830—11.0%
——3——CVE-2025-216377.1 HIG11.0%
——3In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: udp_port: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net'
structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only
from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops'
(null-ptr-deref), e.g. when the current task is exiting, as spotted by
syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using
container_of().
Note that table->data could also be used directly, but that would
increase the size of this fix, while 'sctp.ctl_sock' still needs to be
retrieved from 'net' structure.16dCVE-2018-11928—11.0%
——3——CVE-2025-220797.8 HIG11.0%
——3In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate l_tree_depth to avoid out-of-bounds access
The l_tree_depth field is 16-bit (__le16), but the actual maximum depth is
limited to OCFS2_MAX_PATH_DEPTH.
Add a check to prevent out-of-bounds access if l_tree_depth has an invalid
value, which may occur when reading from a corrupted mounted disk [1].16dCVE-2022-25826—11.0%
——3——CVE-2024-420667.8 HIG11.0%
——3In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix potential integer overflow in page size calculation
Explicitly cast tbo->page_alignment to u64 before bit-shifting to
prevent overflow when assigning to min_page_size.11dCVE-2026-62655—11.0%
——3A
security flaw was found in certain NETGEAR Orbi models that
could allow an unauthorized user to cause the device to stop responding or
restart unexpectedly, disrupting network connectivity and making the device
temporarily unavailable.30dCVE-2022-36927—11.0%
——3——CVE-2026-456097.2 HIG11.0%
——3mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol (MCP) security specifications. Specifically, it processes untrusted URLs for OAuth-related discovery and metadata without verifying if the targets are malicious or internal to the network. This only affects installations with Dynamic Client Registration (DCR) enabled This vulnerability is fixed in 0.1.9.25dCVE-2024-56701—11.0%
——3——CVE-2023-52697—11.0%
——3——CVE-2020-3138—11.0%
——3——CVE-2026-8548—11.0%
——3——CVE-2023-39411—11.0%
——3——CVE-2024-421237.0 HIG11.0%
——3In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages
will be run many times so that double free err_addr in some special case.
So set the err_addr to NULL to avoid the warnings.11dCVE-2022-25823—11.0%
——3——CVE-2025-657994.3 MED11.0%
——3A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.40dCVE-2026-32753—11.0%
——3——CVE-2026-15570—11.0%
——3An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue requests to unintended loopback/internal destinations, including 127.0.0.1 addresses. In demonstrated scenarios, requests initiated through the SmartCenter browserseturl mechanism could reach an internal service and receive a successful response, although the same destination was not reachable through normal browser navigation. The issue affects firmware version V2.78.0.0 and is fixed in firmware version V2.85.2.0.8dCVE-2024-56751—11.0%
——3——CVE-2022-25829—11.0%
——3——CVE-2025-616627.8 HIG11.0%
——3A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.46dCVE-2025-23305—11.0%
——3——CVE-2024-41309—11.0%
——3——CVE-2022-25828—11.0%
——3——CVE-2026-8512—11.0%
——3——CVE-2026-8515—11.0%
——3——CVE-2022-49039—11.0%
——3——CVE-2023-47790—11.0%
——3——CVE-2022-25827—11.0%
——3——CVE-2019-25400—11.0%
——3——CVE-2026-627807.0 HIG11.0%
——3Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.1dCVE-2025-9963—11.0%
——3——CVE-2025-23306—11.0%
——3——CVE-2025-27550—11.0%
——3——CVE-2021-36781—11.0%
——3——