Vulnerabilities exploitable today
351,837in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,651
New KEV · 24H0
Exploit Today ≥ 701,587
Distribution · last window
- Critical1,811
- High5,855
- Medium4,717
- Low452
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-23426—1.8%
——1——CVE-2018-25274—1.8%
——1——CVE-2022-33266—1.8%
——1——CVE-2025-12793—1.8%
——1——CVE-2023-21639—1.8%
——1——CVE-2025-62950—1.8%
——1——CVE-2022-33296—1.8%
——1——CVE-2023-21633—1.8%
——1——CVE-2026-23164—1.8%
——1——CVE-2026-532778.8 HIG1.8%
——1In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
walk_s1() and kvm_walk_nested_s2() expect to be called while holding
kvm->srcu to guard against memslot changes. While this is generally
the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the
respective walkers without taking kvm->srcu.
Fix by acquiring kvm->srcu prior to the table walk in both instances.8dCVE-2022-33226—1.8%
——1——CVE-2021-39680—1.8%
——1——CVE-2026-41966—1.8%
——1——CVE-2026-4016—1.8%
——1——CVE-2022-33281—1.8%
——1——CVE-2023-20775—1.8%
——1——CVE-2024-0163—1.8%
——1——CVE-2023-21640—1.8%
——1——CVE-2026-147903.3 LOW1.8%
——1A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be used. This patch is called bd1d94e70e3bef364c07c5a1d94eca5c9f56e160. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".16dCVE-2026-8142—1.8%
——1——CVE-2021-39681—1.8%
——1——CVE-2023-20761—1.8%
——1——CVE-2026-231545.5 MED1.8%
——1In the Linux kernel, the following vulnerability has been resolved:
net: fix segmentation of forwarding fraglist GRO
This patch enhances GSO segment handling by properly checking
the SKB_GSO_DODGY flag for frag_list GSO packets, addressing
low throughput issues observed when a station accesses IPv4
servers via hotspots with an IPv6-only upstream interface.
Specifically, it fixes a bug in GSO segmentation when forwarding
GRO packets containing a frag_list. The function skb_segment_list
cannot correctly process GRO skbs that have been converted by XLAT,
since XLAT only translates the header of the head skb. Consequently,
skbs in the frag_list may remain untranslated, resulting in protocol
inconsistencies and reduced throughput.
To address this, the patch explicitly sets the SKB_GSO_DODGY flag
for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers
(bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO
packets as potentially modified after protocol translation. As a
result, GSO segmentation will avoid using skb_segment_list and
instead falls back to skb_segment for packets with the SKB_GSO_DODGY
flag. This ensures that only safe and fully translated frag_list
packets are processed by skb_segment_list, resolving protocol
inconsistencies and improving throughput when forwarding GRO packets
converted by XLAT.8dCVE-2023-20760—1.8%
——1——CVE-2022-20547—1.8%
——1——CVE-2023-20766—1.8%
——1——CVE-2025-23235—1.8%
——1——CVE-2024-28807—1.8%
——1——CVE-2025-10650—1.8%
——1——CVE-2017-18307—1.8%
——1——CVE-2025-25217—1.8%
——1——CVE-2023-21635—1.8%
——1——CVE-2024-0036—1.8%
——1——CVE-2026-43457—1.8%
——1——CVE-2026-23124—1.8%
——1——CVE-2025-41256—1.8%
——1——CVE-2026-55967—1.8%
——1——CVE-2021-0535—1.8%
——1——CVE-2026-131994.0 MED1.8%
——1EEPROM firmware on Raspberry Pi 5 and Compute Module 5 devices produced non-random KASLR and RNG seed values. This resulted in consistent kernel addresses across boots and devices, potentially making it easier to exploit other vulnerabilities. Additionally, the low-quality RNG seed may affect the quality of random numbers or delay booting while sufficient entropy is accumulated from other sources.15dCVE-2026-43069—1.8%
——1——