Vulnerabilities exploitable today
352,783in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,653
New KEV · 24H0
Exploit Today ≥ 701,600
Distribution · last window
- Critical2,281
- High7,878
- Medium7,174
- Low676
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-463713.6 LOW0.0%
——0Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.3dCVE-2026-285777.8 HIG0.0%
——0In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2024-43766—0.0%
——0——CVE-2025-21485—0.0%
——0——CVE-2026-0133—0.0%
——0——CVE-2023-20785—0.0%
——0——CVE-2026-0142—0.0%
——0——CVE-2024-53016—0.0%
——0——CVE-2026-00503.3 LOW0.0%
——0In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2023-20750—0.0%
——0——CVE-2026-0153—0.0%
——0——CVE-2026-130676.3 MED0.0%
——0When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local access to the proxy Unix domain socket and a valid X.509 certificate issued by a trusted certificate authority.2dCVE-2025-36751—0.0%
——0——CVE-2023-20788—0.0%
——0——CVE-2025-68962—0.0%
——0——CVE-2026-00917.8 HIG0.0%
——0In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2026-0057—0.0%
——0——CVE-2023-20834—0.0%
——0——CVE-2026-24413—0.0%
——0——CVE-2025-48608—0.0%
——0——CVE-2023-20942—0.0%
——0——CVE-2025-48641—0.0%
——0——CVE-2026-285863.3 LOW0.0%
——0In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2019-20775—0.0%
——0——CVE-2023-21290—0.0%
——0——CVE-2026-00987.8 HIG0.0%
——0In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2024-53018—0.0%
——0——CVE-2025-596176.6 MED0.0%
——0Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.19dCVE-2025-15548—0.0%
——0——CVE-2021-25502—0.0%
——0——CVE-2026-00563.3 LOW0.0%
——0In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2025-47333—0.0%
——0——CVE-2026-0145—0.0%
——0——CVE-2025-486485.5 MED0.0%
——0In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.4dCVE-2026-213837.1 HIG0.0%
——0Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.18dCVE-2026-252587.8 HIG0.0%
——0Memory corruption while processing IOCTL calls for escape operations.4dCVE-2025-58316—0.0%
——0——CVE-2025-47345—0.0%
——0——CVE-2026-419756.3 MED0.0%
——0Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.3dCVE-2025-47331—0.0%
——0——