Vulnerabilities exploitable today
351,837in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,651
New KEV · 24H0
Exploit Today ≥ 701,587
Distribution · last window
- Critical1,811
- High5,855
- Medium4,717
- Low452
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-41223—1.9%
——1——CVE-2021-25517—1.9%
——1——CVE-2026-43271—1.9%
——1——CVE-2025-15569—1.9%
——1——CVE-2026-2738—1.9%
——1——CVE-2025-36156—1.9%
——1——CVE-2021-0902—1.9%
——1——CVE-2021-0425—1.9%
——1——CVE-2017-15829—1.9%
——1——CVE-2021-0653—1.8%
——1——CVE-2026-572517.8 HIG1.9%
——1The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.13dCVE-2025-59484—1.9%
——1——CVE-2024-28954—1.9%
——1——CVE-2023-21628—1.9%
——1——CVE-2026-48066—1.9%
——1——CVE-2021-0598—1.9%
——1——CVE-2025-32446—1.8%
——1——CVE-2022-20018—1.9%
——1——CVE-2026-23158—1.9%
——1——CVE-2022-20508—1.9%
——1——CVE-2026-572527.8 HIG1.9%
——1When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing invalid pointers, eventually leading to the application crashing.13dCVE-2023-48409—1.9%
——1——CVE-2025-58408—1.9%
——1——CVE-2022-20015—1.9%
——1——CVE-2026-577577.1 HIG1.9%
——1Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.20dCVE-2026-55745—1.9%
——1——CVE-2021-0659—1.9%
——1——CVE-2021-0900—1.9%
——1——CVE-2023-21632—1.9%
——1——CVE-2023-24854—1.9%
——1——CVE-2021-0421—1.9%
——1——CVE-2026-8936—1.9%
——1——CVE-2026-131277.8 HIG1.9%
——1The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.13dCVE-2023-22387—1.9%
——1——CVE-2026-131297.8 HIG1.9%
——1When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer.13dCVE-2025-20629—1.9%
——1——CVE-2024-8885—1.8%
——1——CVE-2026-572377.8 HIG1.9%
——1When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.13dCVE-2022-0882—1.9%
——1——CVE-2026-572387.8 HIG1.9%
——1After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the application to crash.13d