Vulnerabilities exploitable today
356,426in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,661
New KEV · 24H0
Exploit Today ≥ 701,603
Distribution · last window
- Critical2,802
- High11,190
- Medium7,403
- Low703
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-468507.8 HIG7.5%
——2In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct()
dc_state_destruct() nulls the resource context of the DC state. The pipe
context passed to dcn35_set_drr() is a member of this resource context.
If dc_state_destruct() is called parallel to the IRQ processing (which
calls dcn35_set_drr() at some point), we can end up using already nulled
function callback fields of struct stream_resource.
The logic in dcn35_set_drr() already tries to avoid this, by checking tg
against NULL. But if the nulling happens exactly after the NULL check and
before the next access, then we get a race.
Avoid this by copying tg first to a local variable, and then use this
variable for all the operations. This should work, as long as nobody
frees the resource pool where the timing generators live.
(cherry picked from commit 0607a50c004798a96e62c089a4c34c220179dcb5)3dCVE-2026-21882—7.5%
——2——CVE-2026-27238—7.5%
——2——CVE-2024-566377.3 HIG7.5%
——2In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Hold module reference while requesting a module
User space may unload ip_set.ko while it is itself requesting a set type
backend module, leading to a kernel crash. The race condition may be
provoked by inserting an mdelay() right after the nfnl_unlock() call.3dCVE-2026-112344.3 MED7.5%
——2Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)15dCVE-2025-64547—7.5%
——2——CVE-2025-6027—7.5%
——2——CVE-2024-49790—7.5%
——2——CVE-2026-7971—7.5%
——2——CVE-2025-64378—7.5%
——2——CVE-2023-34314—7.5%
——2——CVE-2026-27267—7.5%
——2——CVE-2025-64548—7.5%
——2——CVE-2025-59036—7.5%
——2——CVE-2025-39205—7.5%
——2——CVE-2026-27271—7.5%
——2——CVE-2023-34997—7.5%
——2——CVE-2021-22425—7.5%
——2——CVE-2025-38267—7.5%
——2——CVE-2025-12624—7.5%
——2——CVE-2026-54040—7.5%
——2——CVE-2026-13281—7.5%
——2——CVE-2023-22024—7.5%
——2——CVE-2026-151594.3 MED7.5%
——2The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_form_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate any Ninja Forms form ID and download all stored submission data — including names, email addresses, phone numbers, physical addresses, and any other PII collected by site forms — as a downloadable XLSX file.21dCVE-2023-39284—7.5%
——2——CVE-2025-36042—7.5%
——2——CVE-2025-36630—7.5%
——2——CVE-2026-353897.5 HIG7.5%
——2Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, S/MIME signature verification did not validate the certificate trust chain (checkChain: false). Any email signed with a self-signed or untrusted certificate was displayed as having a valid signature. This vulnerability is fixed in 1.4.11.13dCVE-2026-44379—7.5%
——2——CVE-2022-42972—7.5%
——2——CVE-2026-18155.7 MED7.5%
——2Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking.
This issue affects Mobile Application: from 1.6.2 before 1.13.15dCVE-2025-64839—7.4%
——2——CVE-2022-41784—7.5%
——2——CVE-2025-64841—7.5%
——2——CVE-2026-48046.4 MED7.5%
——2The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, and including, 4.2.0. This is due to the theme registering three post meta fields (zakra_menu_item_color, zakra_menu_item_hover_color, and zakra_menu_item_active_color) with 'show_in_rest' => true and 'auth_callback' => '__return_true', but without any sanitize_callback parameter in the register_post_meta() calls. While the classic editor save path applies sanitize_hex_color() sanitization, the REST API path completely bypasses this protection. The unsanitized meta values are then retrieved via get_post_meta() and concatenated directly into CSS strings that are output through wp_add_inline_style() without any escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page.32dCVE-2024-43265—7.5%
——2——CVE-2018-25266—7.5%
——2——CVE-2021-38121—7.5%
——2——CVE-2017-2723—7.5%
——2——CVE-2024-26861—7.5%
——2——