Vulnerabilities exploitable today
353,511in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,655
New KEV · 24H0
Exploit Today ≥ 701,600
Distribution · last window
- Critical2,435
- High8,291
- Medium7,422
- Low691
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-567884.4 MED4.1%
——1RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting in reliable crashes and potential memory disclosure of adjacent global data.15dCVE-2025-52991—4.1%
——1——CVE-2026-48124—4.1%
——1——CVE-2023-40732—4.1%
——1——CVE-2023-31020—4.1%
——1——CVE-2019-25612—4.1%
——1——CVE-2026-40320—4.1%
——1——CVE-2025-38545—4.1%
——1——CVE-2023-43489—4.1%
——1——CVE-2025-49846—4.1%
——1——CVE-2026-4434—4.1%
——1——CVE-2024-22430—4.1%
——1——CVE-2025-61760—4.1%
——1——CVE-2022-26472—4.1%
——1——CVE-2026-95013.3 LOW4.1%
——1A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue.6dCVE-2025-39880—4.1%
——1——CVE-2026-606086.1 MED4.1%
——1Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise CS Financial Aid executes to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Financial Aid accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).2dCVE-2025-20197—4.1%
——1——CVE-2020-0075—4.1%
——1——CVE-2026-1622—4.1%
——1——CVE-2023-52383—4.1%
——1——CVE-2023-53679—4.1%
——1——CVE-2025-36113—4.1%
——1——CVE-2025-55060—4.1%
——1——CVE-2026-45004—4.1%
——1——CVE-2025-39957—4.1%
——1——CVE-2022-50461—4.1%
——1——CVE-2026-42743—4.1%
——1——CVE-2022-50464—4.1%
——1——CVE-2025-54120—4.1%
——1——CVE-2026-277414.3 MED4.1%
——1Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints. The application does not implement anti-CSRF tokens or other request origin validation mechanisms for these administrative actions. An attacker can induce an authenticated administrator to visit a malicious page that silently submits crafted requests, resulting in unauthorized plugin uninstallation or theme installation. This may lead to loss of functionality, execution of untrusted code via malicious themes, and compromise of system integrity.15dCVE-2021-22459—4.1%
——1——CVE-2026-33372—4.1%
——1——CVE-2025-64305—4.1%
——1——CVE-2026-0230—4.1%
——1——CVE-2026-28201—4.1%
——1——CVE-2025-399315.5 MED4.1%
——1In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain
a garbage value from the previous loop. This may then trigger a
crash on the next entry into af_alg_sendmsg when it attempts to do
a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.15dCVE-2025-33176—4.1%
——1——CVE-2026-529725.5 MED4.1%
——1In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Cap AEAD AD length to 0x80000000
In order to prevent arithmetic overflows when checking the TX
buffer size, cap the associated data length to 0x80000000.5dCVE-2023-53657—4.1%
——1——