Vulnerabilities exploitable today
349,195in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,644
New KEV · 24H0
Exploit Today ≥ 701,579
Distribution · last window
- Critical1,298
- High4,252
- Medium3,575
- Low277
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-20795—0.1%
——0——CVE-2022-39854—0.1%
——0——CVE-2023-40640—0.1%
——0——CVE-2023-20745—0.1%
——0——CVE-2023-20743—0.1%
——0——CVE-2026-0046—0.1%
——0——CVE-2026-24509—0.1%
——0——CVE-2023-38457—0.1%
——0——CVE-2022-26452—0.1%
——0——CVE-2022-20117—0.1%
——0——CVE-2025-64315—0.1%
——0——CVE-2025-48568—0.1%
——0——CVE-2026-11330—0.1%
——0——CVE-2024-32910—0.1%
——0——CVE-2024-32898—0.1%
——0——CVE-2024-38406—0.1%
——0——CVE-2023-38461—0.1%
——0——CVE-2024-38407—0.1%
——0——CVE-2025-47382—0.1%
——0——CVE-2023-38463—0.1%
——0——CVE-2023-20737—0.1%
——0——CVE-2024-32904—0.1%
——0——CVE-2025-47405—0.1%
——0——CVE-2023-38462—0.1%
——0——CVE-2025-26449—0.1%
——0——CVE-2025-26452—0.1%
——0——CVE-2026-41964—0.1%
——0——CVE-2018-9421—0.1%
——0——CVE-2025-59606—0.1%
——0——CVE-2026-540998.8 HIG0.1%
——0A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and signed by the cluster, yielding a client certificate that grants cluster-administrator privileges and enabling full cluster takeover.2dCVE-2025-26450—0.1%
——0——CVE-2024-39440—0.1%
——0——CVE-2025-64311—0.1%
——0——CVE-2025-59605—0.1%
——0——CVE-2024-39439—0.1%
——0——CVE-2024-20112—0.1%
——0——CVE-2025-6182—0.1%
——0——CVE-2026-41979—0.1%
——0——CVE-2025-66329—0.1%
——0——CVE-2024-39434—0.1%
——0——