Vulnerabilities exploitable today
349,427in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,647
New KEV · 24H0
Exploit Today ≥ 701,582
Distribution · last window
- Critical1,327
- High4,319
- Medium3,685
- Low289
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-542666.1 MED0.6%
——0Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering (SSR) so that they can be reused during client-side hydration. This avoids repeating the same HTTP requests on the client. The cached responses are stored in TransferState using a cache key generated by hashing request properties (method, response type, mapped URL, serialized body, and sorted query parameters). The cache keys are generated using a weak 32-bit DJB2-like polynomial rolling hash. The 32-bit hash space is extremely small, allowing attackers to find hash collisions. An attacker can easily find a query parameter string (e.g., q=aaCAZMMM for a search request) that produces the exact same 32-bit hash as a sensitive endpoint (e.g., /api/user/profile). When a victim visits a crafted link containing the colliding parameter, the SSR process executes both the search request and the profile request. Due to the hash collision, the search response overwrites the profile response in the TransferState cache. This vulnerability is fixed in 22.0.1, 21.2.17, and 20.3.25.8dCVE-2025-21425—0.6%
——0——CVE-2026-23400—0.6%
——0——CVE-2022-36847—0.6%
——0——CVE-2026-533235.5 MED0.6%
——0In the Linux kernel, the following vulnerability has been resolved:
net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops
DSA replaces the conduit (master) device's ethtool_ops with its own
wrappers that aggregate stats from both the conduit and DSA switch
ports. Taking the lock again inside the DSA wrappers causes a deadlock.
Stumbled upon this when booting qemu with fbnic and CONFIG_NET_DSA_LOOP=y
(which looks like some kind of testing device that auto-populates the ports
of eth0). `ethtool -i` is enough to deadlock. This means we have basically zero
coverage for DSA stuff with real ops locked devs.
Remove the redundant netdev_lock_ops()/netdev_unlock_ops() calls from
the DSA conduit ethtool wrappers.11dCVE-2026-31728—0.5%
——0——CVE-2025-41647—0.6%
——0——CVE-2023-21239—0.6%
——0——CVE-2023-21292—0.6%
——0——CVE-2022-47340—0.6%
——0——CVE-2022-20295—0.6%
——0——CVE-2022-20294—0.6%
——0——CVE-2026-43446—0.6%
——0——CVE-2026-556555.0 MED0.6%
——0A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.9dCVE-2024-32908—0.6%
——0——CVE-2026-50590—0.6%
——0——CVE-2023-35657—0.6%
——0——CVE-2026-31523—0.5%
——0——CVE-2023-21128—0.6%
——0——CVE-2022-20296—0.6%
——0——CVE-2026-43430—0.5%
——0——CVE-2022-33702—0.6%
——0——CVE-2022-20300—0.6%
——0——CVE-2022-20305—0.6%
——0——CVE-2026-23294—0.6%
——0——CVE-2022-47330—0.6%
——0——CVE-2023-21087—0.6%
——0——CVE-2023-20607—0.6%
——0——CVE-2024-27231—0.6%
——0——CVE-2024-27226—0.6%
——0——CVE-2022-20303—0.6%
——0——CVE-2018-9477—0.6%
——0——CVE-2022-20426—0.6%
——0——CVE-2023-20680—0.6%
——0——CVE-2022-20299—0.6%
——0——CVE-2022-20298—0.6%
——0——CVE-2023-21016—0.6%
——0——CVE-2023-20705—0.6%
——0——CVE-2024-25985—0.6%
——0——CVE-2024-25984—0.6%
——0——