Vulnerabilities exploitable today
351,736in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,651
New KEV · 24H0
Exploit Today ≥ 701,587
Distribution · last window
- Critical1,781
- High5,774
- Medium4,665
- Low440
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-20147—1.7%
——1——CVE-2024-25960—1.7%
——1——CVE-2025-5687—1.7%
——1——CVE-2025-61143—1.7%
——1——CVE-2022-20134—1.7%
——1——CVE-2026-57451—1.7%
——1——CVE-2025-48862—1.7%
——1——CVE-2026-23191—1.7%
——1——CVE-2025-58918—1.7%
——1——CVE-2026-43459—1.7%
——1——CVE-2026-54318—1.7%
——1——CVE-2025-24851—1.7%
——1——CVE-2025-21054—1.7%
——1——CVE-2026-162467.3 HIG1.7%
——1In BRAIN2 versions prior to 3.09, the
application LogPathConfig.exe is executed during setup. As a result, the
Windows group Everyone is granted full control over %ProgramData% instead of
being restricted to %ProgramData%\Bizerba\BRAIN2\.
Starting with BRAIN2 3.09, the setup no
longer executes this tool.
However, the optional component Bizerba ScriptService still executes it.
Bizerba ScriptService is being
deprecated and will no longer be included starting with BRAIN2 version 3.11.16hCVE-2026-25046—1.7%
——1——CVE-2019-25649—1.7%
——1——CVE-2022-40518—1.7%
——1——CVE-2024-58043—1.7%
——1——CVE-2021-1028—1.7%
——1——CVE-2026-38571—1.7%
——1——CVE-2026-55782—1.7%
——1NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp allocates buffers from attacker-controlled 32-bit section and custom-name length fields without validating them against the data present in the file. A tiny crafted module can force multi-gigabyte allocations during listing or extraction through NameSize, Information.Size, and std::string or vector allocation paths, causing memory exhaustion or process termination. This issue is fixed in version 6.5.1749.0.8dCVE-2021-1029—1.7%
——1——CVE-2025-14858—1.7%
——1——CVE-2021-39768—1.7%
——1——CVE-2026-43479—1.7%
——1——CVE-2021-0667—1.7%
——1——CVE-2019-25467—1.7%
——1——CVE-2025-397735.5 MED1.7%
——1In the Linux kernel, the following vulnerability has been resolved:
net: bridge: fix soft lockup in br_multicast_query_expired()
When set multicast_query_interval to a large value, the local variable
'time' in br_multicast_send_query() may overflow. If the time is smaller
than jiffies, the timer will expire immediately, and then call mod_timer()
again, which creates a loop and may trigger the following soft lockup
issue.
watchdog: BUG: soft lockup - CPU#1 stuck for 221s! [rb_consumer:66]
CPU: 1 UID: 0 PID: 66 Comm: rb_consumer Not tainted 6.16.0+ #259 PREEMPT(none)
Call Trace:
<IRQ>
__netdev_alloc_skb+0x2e/0x3a0
br_ip6_multicast_alloc_query+0x212/0x1b70
__br_multicast_send_query+0x376/0xac0
br_multicast_send_query+0x299/0x510
br_multicast_query_expired.constprop.0+0x16d/0x1b0
call_timer_fn+0x3b/0x2a0
__run_timers+0x619/0x950
run_timer_softirq+0x11c/0x220
handle_softirqs+0x18e/0x560
__irq_exit_rcu+0x158/0x1a0
sysvec_apic_timer_interrupt+0x76/0x90
</IRQ>
This issue can be reproduced with:
ip link add br0 type bridge
echo 1 > /sys/class/net/br0/bridge/multicast_querier
echo 0xffffffffffffffff >
/sys/class/net/br0/bridge/multicast_query_interval
ip link set dev br0 up
The multicast_startup_query_interval can also cause this issue. Similar to
the commit 99b40610956a ("net: bridge: mcast: add and enforce query
interval minimum"), add check for the query interval maximum to fix this
issue.8dCVE-2022-20014—1.7%
——1——CVE-2025-62933—1.7%
——1——CVE-2026-7739—1.7%
——1——CVE-2026-43118—1.7%
——1——CVE-2026-44018—1.7%
——1——CVE-2026-4009—1.7%
——1——CVE-2022-50044—1.7%
——1——CVE-2025-7010—1.7%
——1——CVE-2026-7135—1.7%
——1——CVE-2025-49211—1.7%
——1——CVE-2026-43498—1.7%
——1——CVE-2026-43349—1.7%
——1——