Vulnerabilities exploitable today
352,791in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,653
New KEV · 24H0
Exploit Today ≥ 701,600
Distribution · last window
- Critical2,306
- High8,002
- Medium7,177
- Low676
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-37118—3.7%
——1——CVE-2026-462888.4 HIG3.7%
——1In the Linux kernel, the following vulnerability has been resolved:
of: unittest: fix use-after-free in of_unittest_changeset()
The variable 'parent' is assigned the value of 'nchangeset' earlier in the
function, meaning both point to the same struct device_node. The call to
of_node_put(nchangeset) can decrement the reference count to zero and
free the node if there are no other holders. After that, the code still
uses 'parent' to check for the presence of a property and to read a
string property, leading to a use-after-free.
Fix this by moving the of_node_put() call after the last access to
'parent', avoiding the UAF.4dCVE-2018-11964—3.7%
——1——CVE-2026-21316—3.7%
——1——CVE-2020-0343—3.7%
——1——CVE-2025-21943—3.7%
——1——CVE-2024-34677—3.7%
——1——CVE-2024-29015—3.7%
——1——CVE-2025-38093—3.7%
——1——CVE-2020-37217—3.7%
——1——CVE-2021-46750—3.7%
——1——CVE-2023-53600—3.7%
——1——CVE-2019-9289—3.7%
——1——CVE-2025-5344—3.7%
——1——CVE-2020-10830—3.7%
——1——CVE-2023-28570—3.7%
——1——CVE-2025-38496—3.7%
——1——CVE-2020-11173—3.7%
——1——CVE-2024-34662—3.7%
——1——CVE-2026-45994—3.7%
——1——CVE-2026-105485.3 MED3.7%
——1A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credential_pool.py of the component Credential Pool Synchronization. The manipulation results in improper authentication. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.5dCVE-2026-1880—3.7%
——1——CVE-2019-2191—3.7%
——1——CVE-2026-32235—3.7%
——1——CVE-2026-21350—3.7%
——1——CVE-2024-36294—3.7%
——1——CVE-2018-21077—3.7%
——1——CVE-2020-0247—3.7%
——1——CVE-2026-10721—3.7%
——1Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7 for reporting.4dCVE-2025-672467.3 HIG3.7%
——1A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver exposes a device interface accessible to a normal user and handles attacker-controlled structures containing the lower 4GB of physical addresses. The handler maps arbitrary physical memory via MmMapIoSpace and copies data back to user mode without verifying the caller's privileges or the target address range. This allows unprivileged users to read arbitrary physical memory, potentially exposing kernel data structures, kernel pointers, security tokens, and other sensitive information. This vulnerability can be further exploited to bypass the Kernel Address Space Layout Rules (KASLR) and achieve local privilege escalation.22dCVE-2025-220604.7 MED3.7%
——1In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM
information, from concurrent modifications.
Both the TCAM and SRAM tables are indirectly accessed by configuring
an index register that selects the row to read or write to. This means
that operations must be atomic in order to, e.g., avoid spreading
writes across multiple rows. Since the shadow SRAM array is used to
find free rows in the hardware table, it must also be protected in
order to avoid TOCTOU errors where multiple cores allocate the same
row.
This issue was detected in a situation where `mvpp2_set_rx_mode()` ran
concurrently on two CPUs. In this particular case the
MVPP2_PE_MAC_UC_PROMISCUOUS entry was corrupted, causing the
classifier unit to drop all incoming unicast - indicated by the
`rx_classifier_drops` counter.13dCVE-2019-9427—3.7%
——1——CVE-2019-9417—3.7%
——1——CVE-2025-68276—3.7%
——1——CVE-2018-11965—3.7%
——1——CVE-2019-2260—3.7%
——1——CVE-2025-64750—3.7%
——1——CVE-2019-9435—3.7%
——1——CVE-2019-9472—3.7%
——1——CVE-2026-241817.3 HIG3.7%
——1NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.4d