Vulnerabilities exploitable today
356,679in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,662
New KEV · 24H0
Exploit Today ≥ 701,605
Distribution · last window
- Critical2,534
- High10,642
- Medium6,742
- Low670
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-0391—8.2%
——2——CVE-2026-3471—8.2%
——2——CVE-2025-61785—8.2%
——2——CVE-2025-9886—8.2%
——2——CVE-2025-68362—8.2%
——2——CVE-2024-13915—8.2%
——2——CVE-2025-10700—8.2%
——2——CVE-2026-30579—8.2%
——2——CVE-2024-24968—8.2%
——2——CVE-2023-54213—8.2%
——2——CVE-2025-10377—8.2%
——2——CVE-2025-54496—8.2%
——2——CVE-2025-68344—8.2%
——2——CVE-2025-15598—8.2%
——2——CVE-2024-565767.8 HIG8.2%
——2In the Linux kernel, the following vulnerability has been resolved:
media: i2c: tc358743: Fix crash in the probe error path when using polling
If an error occurs in the probe() function, we should remove the polling
timer that was alarmed earlier, otherwise the timer is called with
arguments that are already freed, which results in a crash.
------------[ cut here ]------------
WARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268
Modules linked in:
CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226
Hardware name: Diasom DS-RK3568-SOM-EVB (DT)
pstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __run_timers+0x244/0x268
lr : __run_timers+0x1d4/0x268
sp : ffffff80eff2baf0
x29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00
x26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00
x23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000
x20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff
x17: ffffffc06f146000 x16: ffffff80eff27dc0 x15: 000000000000003e
x14: 0000000000000000 x13: 00000000000054da x12: 0000000000000000
x11: 00000000000639c0 x10: 000000000000000c x9 : 0000000000000009
x8 : ffffff80eff2cb40 x7 : ffffff80eff2cb40 x6 : ffffff8002bee480
x5 : ffffffc080cb2220 x4 : ffffffc080cb2150 x3 : 00000000000f4240
x2 : 0000000000000102 x1 : ffffff80eff2bb00 x0 : ffffff80041c8bf0
Call trace:
__run_timers+0x244/0x268
timer_expire_remote+0x50/0x68
tmigr_handle_remote+0x388/0x39c
run_timer_softirq+0x38/0x44
handle_softirqs+0x138/0x298
__do_softirq+0x14/0x20
____do_softirq+0x10/0x1c
call_on_irq_stack+0x24/0x4c
do_softirq_own_stack+0x1c/0x2c
irq_exit_rcu+0x9c/0xcc
el1_interrupt+0x48/0xc0
el1h_64_irq_handler+0x18/0x24
el1h_64_irq+0x7c/0x80
default_idle_call+0x34/0x68
do_idle+0x23c/0x294
cpu_startup_entry+0x38/0x3c
secondary_start_kernel+0x128/0x160
__secondary_switched+0xb8/0xbc
---[ end trace 0000000000000000 ]---4dCVE-2024-27357—8.2%
——2——CVE-2026-202336.1 MED8.2%
——2A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed.
This vulnerability existed because of insufficient validation of user input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.17dCVE-2023-32959—8.2%
——2——CVE-2023-54264—8.2%
——2——CVE-2025-24973—8.2%
——2——CVE-2025-43488—8.2%
——2——CVE-2025-37884—8.2%
——2——CVE-2024-0206—8.2%
——2——CVE-2023-54305—8.2%
——2——CVE-2024-26775—8.2%
——2——CVE-2026-57645—8.2%
——2——CVE-2026-40311—8.2%
——2——CVE-2023-49614—8.2%
——2——CVE-2026-32231—8.2%
——2——CVE-2026-42522—8.2%
——2——CVE-2025-31176—8.2%
——2——CVE-2023-53998—8.2%
——2——CVE-2026-95905.3 MED8.2%
——2Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset information without the required permission.17dCVE-2026-3201—8.2%
——2——CVE-2020-11186—8.2%
——2——CVE-2024-21807—8.2%
——2——CVE-2026-9261—8.2%
——2——CVE-2026-655354.3 MED8.2%
——2Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.16dCVE-2026-220514.3 MED8.2%
——2StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.32dCVE-2025-37843—8.2%
——2——