Vulnerabilities exploitable today
350,515in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,651
New KEV · 24H4
Exploit Today ≥ 701,587
Distribution · last window
- Critical1,541
- High5,045
- Medium4,141
- Low344
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-21756—1.4%
——0——CVE-2025-60172—1.4%
——0——CVE-2025-60170—1.4%
——0——CVE-2025-11775—1.4%
——0——CVE-2021-39731—1.4%
——0——CVE-2024-34720—1.4%
——0——CVE-2022-37710—1.4%
——0——CVE-2025-4384—1.4%
——0——CVE-2024-49834—1.4%
——0——CVE-2024-5465—1.4%
——0——CVE-2022-21755—1.4%
——0——CVE-2026-46654—1.4%
——0——CVE-2021-0694—1.4%
——0——CVE-2025-60171—1.4%
——0——CVE-2022-20536—1.4%
——0——CVE-2025-60173—1.4%
——0——CVE-2025-48502—1.4%
——0——CVE-2026-11967—1.4%
——0——CVE-2021-39736—1.4%
——0——CVE-2026-106677.8 HIG1.4%
——0Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated kernel objects. Iteration over this list in k_object_wordlist_foreach() was performed under lists_lock using the SAFE iterator (which caches the next node), but list removal and freeing of nodes was performed under different, disjoint spinlocks: objfree_lock in k_object_free() and obj_lock in unref_check(). On an SMP system, while one CPU iterated obj_list under lists_lock, another CPU could unlink and k_free() the dyn_obj node that the iterator had cached as its next pointer, causing the iterator to dereference freed kernel memory (use-after-free / dangling list traversal). All of the racing operations are reachable from unprivileged user-mode threads via system calls: k_object_alloc/k_object_alloc_size and k_object_release drive removals through unref_check() (under obj_lock), while k_thread_abort and thread creation drive the iteration through k_thread_perms_all_clear()/k_thread_perms_inherit() (under lists_lock). A deprivileged user thread on a CONFIG_SMP + CONFIG_USERSPACE build can therefore corrupt the kernel's object-tracking structures across the userspace security boundary, yielding kernel memory corruption (potential privilege escalation) or a kernel crash (denial of service). The fix removes objfree_lock and serializes every obj_list modification under lists_lock, including holding it across find+remove in k_object_free() and around unref_check() in k_thread_perms_clear(). Affects CONFIG_SMP+CONFIG_USERSPACE+CONFIG_DYNAMIC_OBJECTS configurations; the defect dates to the 2019 spinlockification (commit 8a3d57b6cc6, first released in v1.14.0) and shipped through v4.4.0.5dCVE-2026-24432—1.4%
——0——CVE-2020-0407—1.4%
——0——CVE-2026-137505.5 MED1.4%
——0Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker could exploit this by obtaining read access to the affected user's local log files, causing credentials such as passwords, tokens, or private key material to be exposed without additional application-level safeguards. Successful exploitation requires credentials to be present in the affected connection context and the resulting logs to be accessible from the local environment. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade.21dCVE-2026-57289—1.4%
——0——CVE-2025-67471—1.4%
——0——CVE-2025-31172—1.4%
——0——CVE-2026-46710—1.4%
——0——CVE-2021-0641—1.4%
——0——CVE-2026-41244—1.4%
——0——CVE-2025-31173—1.4%
——0——CVE-2021-39719—1.4%
——0——CVE-2025-21002—1.4%
——0——CVE-2024-45446—1.4%
——0——CVE-2021-39718—1.4%
——0——CVE-2026-351433.0 LOW1.4%
——0HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to set the "SameSite" attribute on session cookies generated during authentication, which could allow a remote attacker to execute Cross-Site Request Forgery (CSRF) attacks if additional mitigations, such as Anti-CSRF tokens, are not implemented.4dCVE-2023-33283—1.4%
——0——CVE-2022-26473—1.4%
——0——CVE-2025-12578—1.4%
——0——CVE-2026-54001—1.4%
——0osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, on Windows, a local unprivileged attacker can cause a heap buffer out-of-bounds write if there is a query of the authenticode table targeting a maliciously crafted binary, due to publisher information parsing in getOriginalProgramName. If exploited successfully, this could allow a potential local privilege escalation from standard user to SYSTEM. This issue is fixed in version 5.23.1.8dCVE-2019-3700—1.4%
——0——