Vulnerabilities exploitable today
356,659in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,662
New KEV · 24H0
Exploit Today ≥ 701,605
Distribution · last window
- Critical2,543
- High10,721
- Medium6,909
- Low694
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-0011—7.9%
——2——CVE-2025-39730—7.9%
——2——CVE-2022-4363—7.9%
——2——CVE-2018-253838.4 HIG7.9%
——2Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.18dCVE-2026-5943—7.9%
——2——CVE-2025-59763—7.9%
——2——CVE-2025-23749—7.9%
——2——CVE-2025-69022—7.9%
——2——CVE-2025-56675—7.9%
——2——CVE-2025-59770—7.9%
——2——CVE-2024-57949—7.9%
——2——CVE-2022-32920—7.9%
——2——CVE-2025-10346—7.9%
——2——CVE-2021-41222—7.9%
——2——CVE-2025-46241—7.8%
——2——CVE-2024-8270—7.9%
——2——CVE-2026-21907—7.9%
——2——CVE-2026-33092—7.9%
——2——CVE-2026-42729—7.9%
——2——CVE-2025-23743—7.9%
——2——CVE-2026-42728—7.9%
——2——CVE-2025-59771—7.9%
——2——CVE-2025-59765—7.9%
——2——CVE-2026-586287.8 HIG7.9%
——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.17dCVE-2023-42943—7.9%
——2——CVE-2025-10927—7.9%
——2——CVE-2025-59752—7.9%
——2——CVE-2021-46791—7.9%
——2——CVE-2026-43934—7.9%
——2——CVE-2026-42424—7.9%
——2——CVE-2025-55054—7.9%
——2——CVE-2025-68936—7.9%
——2——CVE-2026-419883.2 LOW7.9%
——2uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.31dCVE-2025-52580—7.9%
——2——CVE-2025-23109—7.8%
——2——CVE-2026-41487—7.9%
——2——CVE-2026-140816.5 MED7.9%
——2Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Low)38dCVE-2026-112368.3 HIG7.9%
——2Insufficient policy enforcement in Web Bluetooth in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)16dCVE-2021-41217—7.9%
——2——CVE-2025-59768—7.9%
——2——