PULSEUnderground Intel

LIVE35signals / 24h

FEED

ransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Other

CVE Watch356,393 in full archive

Vulnerabilities exploitable today

356,393in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,661

New KEV · 24H0

Exploit Today ≥ 701,603

Distribution · last window

Critical
2,794
High
11,183
Medium
7,442
Low
701

Filters

Window

Severity

Flags

Vulnerabilities355,361–355,400 · 356,393

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-20442—

——0——CVE-2026-00163.3 LOW

——0In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.16d CVE-2026-0153—

——0——CVE-2026-178726.1 MED

——0Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)4d CVE-2023-20787—

——0——CVE-2025-54651—

——0——CVE-2026-0133—

——0——CVE-2025-463713.6 LOW

——0Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.14d CVE-2026-20439—

——0——CVE-2026-213797.8 HIG

——0Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.30d CVE-2025-54625—

——0——CVE-2025-57806—

——0——CVE-2026-28548—

——0——CVE-2025-36751—

——0——CVE-2022-47331—

——0——CVE-2026-28537—

——0——CVE-2026-00897.8 HIG

——0In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15d CVE-2023-21290—

——0——CVE-2025-48625—

——0——CVE-2023-44128—

——0——CVE-2025-47385—

——0——CVE-2025-58740—

——0——CVE-2025-596166.6 MED

——0Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.30d CVE-2025-486485.5 MED

——0In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.16d CVE-2026-3229—

——0——CVE-2026-34862—

——0——CVE-2023-20750—

——0——CVE-2026-00997.8 HIG

——0In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.15d CVE-2026-24413—

——0——CVE-2025-264187.8 HIG

——0In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.16d CVE-2025-48641—

——0——CVE-2023-20620—

——0——CVE-2026-112905.0 MED

——0Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious file. (Chromium security severity: Low)15d CVE-2025-48575—

——0——CVE-2026-34857—

——0——CVE-2023-20623—

——0——CVE-2026-440594.5 MED

——0A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption.14d CVE-2026-252587.8 HIG

——0Memory corruption while processing IOCTL calls for escape operations.15d CVE-2025-47333—

——0——CVE-2026-21002—