Vulnerabilities exploitable today
355,789in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,660
New KEV · 24H0
Exploit Today ≥ 701,604
Distribution · last window
- Critical2,756
- High11,042
- Medium7,295
- Low703
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-45118—7.2%
——2——CVE-2026-561135.3 MED7.2%
——2dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated same-link attackers to crash the daemon by sending a crafted DHCPv6 RENEW reply with RFC6603 OPTION_PD_EXCLUDE and both preferred and valid lifetimes set to zero. Attackers acting as or impersonating a DHCPv6 server can trigger dhcp6_deprecatedele() to free a delegated child address while an outer TAILQ_FOREACH_SAFE iterator in dhcp6_deprecateaddrs() still holds the freed pointer, causing a use-after-free when TAILQ_REMOVE is reached.22dCVE-2018-253875.3 MED7.2%
——2HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the user update endpoint. Attackers can craft malicious forms targeting the aksi_user.php script with parameters like id_user, password, and level to modify admin credentials without authentication.15dCVE-2025-65230—7.2%
——2——CVE-2024-58082—7.2%
——2——CVE-2025-21695—7.2%
——2——CVE-2026-33457—7.2%
——2——CVE-2023-54246—7.2%
——2——CVE-2021-25692—7.2%
——2——CVE-2024-58084—7.2%
——2——CVE-2022-50878—7.2%
——2——CVE-2022-50710—7.2%
——2——CVE-2026-112744.3 MED7.2%
——2Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)14dCVE-2014-3251—7.2%
——2——CVE-2023-54002—7.2%
——2——CVE-2025-4235—7.2%
——2——CVE-2025-63082—7.2%
——2——CVE-2026-20111—7.2%
——2——CVE-2022-25917—7.2%
——2——CVE-2025-26379—7.2%
——2——CVE-2026-32357—7.2%
——2——CVE-2022-50864—7.2%
——2——CVE-2026-25901—7.2%
——2——CVE-2020-0116—7.2%
——2——CVE-2023-540507.8 HIG7.2%
——2In the Linux kernel, the following vulnerability has been resolved:
ubifs: Fix memleak when insert_old_idx() failed
Following process will cause a memleak for copied up znode:
dirty_cow_znode
zn = copy_znode(c, znode);
err = insert_old_idx(c, zbr->lnum, zbr->offs);
if (unlikely(err))
return ERR_PTR(err); // No one refers to zn.
Fetch a reproducer in [Link].
Function copy_znode() is split into 2 parts: resource allocation
and znode replacement, insert_old_idx() is split in similar way,
so resource cleanup could be done in error handling path without
corrupting metadata(mem & disk).
It's okay that old index inserting is put behind of add_idx_dirt(),
old index is used in layout_leb_in_gaps(), so the two processes do
not depend on each other.2dCVE-2024-36245—7.2%
——2——CVE-2025-36132—7.2%
——2——CVE-2025-48055—7.2%
——2——CVE-2022-50698—7.2%
——2——CVE-2025-23129—7.2%
——2——CVE-2025-8461—7.2%
——2——CVE-2025-33236—7.2%
——2——CVE-2023-20594—7.2%
——2——CVE-2026-5295—7.2%
——2——CVE-2025-22301—7.2%
——2——CVE-2025-62313—7.2%
——2——CVE-2025-68380—7.2%
——2——CVE-2025-68029—7.2%
——2——CVE-2023-54311—7.2%
——2——CVE-2024-46704—7.2%
——2——