Vulnerabilities exploitable today
355,213in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,656
New KEV · 24H0
Exploit Today ≥ 701,601
Distribution · last window
- Critical2,523
- High9,111
- Medium7,331
- Low692
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-22037—6.9%
——2——CVE-2025-23691—6.9%
——2——CVE-2022-34410—6.9%
——2——CVE-2022-34409—6.9%
——2——CVE-2026-42089—6.9%
——2——CVE-2021-20408—6.9%
——2——CVE-2026-24392—6.9%
——2——CVE-2024-24980—6.9%
——2——CVE-2024-35638—6.9%
——2——CVE-2025-36600—6.9%
——2——CVE-2025-21657—6.9%
——2——CVE-2025-12699—6.9%
——2——CVE-2026-24938—6.9%
——2——CVE-2024-32384—6.9%
——2——CVE-2024-42268—6.9%
——2——CVE-2026-32419—6.9%
——2——CVE-2024-57880—6.9%
——2——CVE-2026-394618.8 HIG6.9%
——2libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available. However, it does not verify that its socket descriptor fits within select(2)'s descriptor set size limit of FD_SETSIZE (1024).
An attacker able to cause an application using libcasper(3) to allocate large file descriptors, e.g., by opening many descriptors and executing a program which is not careful to close them upon startup, may trigger stack corruption. If the target application runs with setuid root privileges, this could be used to escalate local privileges.12dCVE-2022-34417—6.9%
——2——CVE-2013-4872—6.9%
——2——CVE-2026-13725—6.9%
——2The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.3dCVE-2025-23710—6.9%
——2——CVE-2024-35632—6.9%
——2——CVE-2025-23693—6.9%
——2——CVE-2026-5507—6.9%
——2——CVE-2026-25343—6.9%
——2——CVE-2025-36633—6.9%
——2——CVE-2020-7339—6.9%
——2——CVE-2025-23694—6.9%
——2——CVE-2026-445463.7 LOW6.9%
——2daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 as header line separators, but autobahn decodes header values to str and calls splitlines(). An attacker can exploit this parser differential to inject additional headers into the ASGI scope passed to the application. daphne now rejects requests with these bytes in any header value with a 400 response.12dCVE-2026-180034.3 MED6.9%
——2Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)13hCVE-2026-584025.4 MED6.9%
——2Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block renderer wrote the Markdown code-fence language or info-string into the code class="language-…" data-lang="…" wrapper without HTML escaping. A fence info-string containing a quote and a script payload breaks out of the attribute and injects a live script element. This issue is fixed in 0.163.3.27dCVE-2024-26708—6.9%
——2——CVE-2023-54180—6.9%
——2——CVE-2026-654835.9 MED6.9%
——2Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.12dCVE-2025-21822—6.9%
——2——CVE-2026-64165—6.9%
——2In the Linux kernel, the following vulnerability has been resolved:
ARM: integrator: Fix early initialization
Starting with commit bdb249fce9ad4 ("ARM: integrator: read counter using
syscon/regmap"), intcp_init_early calls syscon_regmap_lookup_by_compatible
which in turn calls of_syscon_register. This function allocates memory.
Since the memory management code has not been initialized at that time,
the call always fails. It either returns -ENOMEM or crashes as follows.
Unable to handle kernel NULL pointer dereference at virtual address 0000000c when read
[0000000c] *pgd=00000000
Internal error: Oops: 5 [#1] ARM
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper Not tainted 6.15.0-rc5-00026-g5fcc9bf84ee5 #1 PREEMPT
Hardware name: ARM Integrator/CP (Device Tree)
PC is at __kmalloc_cache_noprof+0xec/0x39c
LR is at __kmalloc_cache_noprof+0x34/0x39c
...
Call trace:
__kmalloc_cache_noprof from of_syscon_register+0x7c/0x310
of_syscon_register from device_node_get_regmap+0xa4/0xb0
device_node_get_regmap from intcp_init_early+0xc/0x40
intcp_init_early from start_kernel+0x60/0x688
start_kernel from 0x0
The crash is seen due to a dereferenced pointer which is not supposed to be
NULL but is NULL if the memory management subsystem has not been
initialized. The crash is not seen with all versions of gcc. Some versions
such as gcc 9.x apparently do not dereference the pointer, presumably if
tracing is disabled. The problem has been reproduced with gcc 10.x, 11.x,
and 13.x. Either case, if the crash is not seen, the call to
syscon_regmap_lookup_by_compatible returns -ENOMEM, and
sched_clock_register is never called.
Fix the problem by moving the early initialization code into the standard
machine initialization code.5dCVE-2025-64784—6.9%
——2——CVE-2022-34407—6.9%
——2——CVE-2020-4884—6.9%
——2——