PULSEUnderground Intel

LIVE0signals / 24h

FEED

vulnKEV agrega CVE-2026-64849 — MLflow / MLflowvulnKEV agrega CVE-2026-33824 — Microsoft / Internet Key Exchange (IKE) Service ExtensionsvulnKEV agrega CVE-2026-59310 — Broadcom / VMware vCentervulnKEV agrega CVE-2026-55040 — Microsoft / SharePointvulnKEV agrega CVE-2026-65400 — Apple / macOSvulnKEV agrega CVE-2025-62593 — Ray-Project / Rayransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-CommercevulnKEV agrega CVE-2026-64849 — MLflow / MLflowvulnKEV agrega CVE-2026-33824 — Microsoft / Internet Key Exchange (IKE) Service ExtensionsvulnKEV agrega CVE-2026-59310 — Broadcom / VMware vCentervulnKEV agrega CVE-2026-55040 — Microsoft / SharePointvulnKEV agrega CVE-2026-65400 — Apple / macOSvulnKEV agrega CVE-2025-62593 — Ray-Project / Rayransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerce

CVE Watch363,707 in full archive

Vulnerabilities exploitable today

363,707in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,671

New KEV · 24H0

Exploit Today ≥ 701,610

Distribution · last window

Critical
2,925
High
12,301
Medium
7,512
Low
684

Filters

Window

Severity

Flags

Vulnerabilities362,161–362,200 · 363,707

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-409534.4 MED

——0CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.36d CVE-2025-47348—

——0——CVE-2025-47369—

——0——CVE-2026-00967.8 HIG

——0In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.30d CVE-2026-0137—

——0——CVE-2025-21455—

——0——CVE-2026-00605.5 MED

——0In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.30d CVE-2026-0123—

——0——CVE-2026-00745.5 MED

——0In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.30d CVE-2024-47026—

——0——CVE-2025-47406—

——0——CVE-2025-47393—

——0——CVE-2025-27049—

——0——CVE-2025-66327—

——0——CVE-2026-213837.1 HIG

——0Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.44d CVE-2025-48960—

——0——CVE-2026-25266—

——0——CVE-2026-0145—

——0——CVE-2026-0057—

——0——CVE-2025-54625—

——0——CVE-2025-47385—

——0——CVE-2026-24413—

——0——CVE-2023-20623—

——0——CVE-2026-178726.1 MED

——0Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)18d CVE-2025-48575—

——0——CVE-2023-20685—

——0——CVE-2026-00997.8 HIG

——0In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.30d CVE-2024-34725—

——0——CVE-2026-210796.5 MED

——0Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.2d CVE-2024-43766—

——0——CVE-2025-23364—

——0——CVE-2023-21101—

——0——CVE-2025-54651—

——0——CVE-2025-36889—

——0——CVE-2023-20620—

——0——CVE-2025-58313—

——0——CVE-2025-47374—

——0——CVE-2026-28548—

——0——CVE-2026-112905.0 MED

——0Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious file. (Chromium security severity: Low)29d CVE-2024-47025—