Vulnerabilities exploitable today
356,684in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,662
New KEV · 24H0
Exploit Today ≥ 701,605
Distribution · last window
- Critical2,537
- High10,637
- Medium6,742
- Low667
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-64351—8.3%
——2In the Linux kernel, the following vulnerability has been resolved:
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
kalmia_rx_fixup() computes usb_packet_length = skb->len - (2 *
KALMIA_HEADER_LENGTH) as a u16, guarded only by a pre-loop check that
skb->len is at least KALMIA_HEADER_LENGTH, which is 6. A device can
deliver a short bulk-IN frame with skb->len in the 6 to 11 range, or
leave a short trailing remainder on a later loop iteration. Either case
underflows usb_packet_length to about 65530.
That bypasses the usb_packet_length < ether_packet_length truncation path.
The device-supplied ether_packet_length, a le16 up to 65535 read from
header_start[2], then drives a memcmp() and the following skb_trim() and
skb_pull() past the end of the rx buffer. The rx buffer is hard_mtu * 10,
which is 14000 bytes. That is an out of bounds read.
Require both the start and end framing headers to be present before
subtracting them, on every loop iteration.15dCVE-2025-40101—8.3%
——2——CVE-2024-43107—8.3%
——2——CVE-2026-656028.8 HIG8.3%
——2Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references (the allowlist was only enforced for HTTP serversTransport references). A low-privileged Kubernetes user in a namespace not listed in crossProviderNamespaces can set serversTransport: foo@file on an IngressRouteTCP service, causing Traefik to accept the forbidden cross-provider reference and use a file-provider TCPServersTransport — including privileged backend mTLS client certificates, SPIFFE identity, or PROXY-protocol settings. This is fixed in 3.6.23 and 3.7.7.3dCVE-2023-23909—8.3%
——2——CVE-2025-8906—8.3%
——2——CVE-2024-13683—8.3%
——2——CVE-2026-35166—8.3%
——2——CVE-2020-37013—8.3%
——2——CVE-2022-49580—8.3%
——2——CVE-2024-57962—8.3%
——2——CVE-2024-25658—8.3%
——2——CVE-2018-252558.4 HIG8.3%
——210-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.19dCVE-2019-0071—8.3%
——2——CVE-2022-49577—8.3%
——2——CVE-2025-22023—8.3%
——2——CVE-2022-42878—8.3%
——2——CVE-2025-52782—8.3%
——2——CVE-2020-36977—8.3%
——2——CVE-2017-0705—8.3%
——2——CVE-2025-8615—8.3%
——2——CVE-2019-25603—8.3%
——2——CVE-2023-21928—8.3%
——2——CVE-2024-54536—8.3%
——2——CVE-2024-33646—8.3%
——2——CVE-2025-10136—8.3%
——2——CVE-2023-6143—8.3%
——2——CVE-2025-36183—8.3%
——2——CVE-2019-8757—8.3%
——2——CVE-2021-26328—8.3%
——2——CVE-2024-45527—8.3%
——2——CVE-2022-49585—8.3%
——2——CVE-2024-21044—8.3%
——2——CVE-2026-24368—8.3%
——2——CVE-2023-26300—8.3%
——2——CVE-2026-112106.5 MED8.3%
——2Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chromium security severity: Medium)17dCVE-2024-0131—8.3%
——2——CVE-2026-33386—8.3%
——2QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin‑fetching mechanism. A malicious attacker can perform a Man‑in‑the‑Middle (MITM) attack by impersonating the opensolution.org server and serving arbitrary HTML or JavaScript at the plugin list endpoint. When a user accesses the plugin page, the malicious content is automatically fetched, rendered, and executed.
This issue was fixed in a patch to version 6.8 published on 15.05.2026, deployments without this patch are still vulnerable.19dCVE-2018-252518.4 HIG8.3%
——2Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu to achieve code execution through SEH chain exploitation.15dCVE-2025-4128—8.3%
——2——