Vulnerabilities exploitable today
365,446in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,682
New KEV · 24H0
Exploit Today ≥ 701,626
Distribution · last window
- Critical2,324
- High9,979
- Medium4,918
- Low460
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-36921—0.1%
——0——CVE-2026-00435.5 MED0.1%
——0In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.36dCVE-2024-0028—0.1%
——0——CVE-2026-11347—0.1%
——0——CVE-2024-47034—0.1%
——0——CVE-2026-24929—0.1%
——0——CVE-2026-285814.0 MED0.1%
——0In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileges needed. User interaction is null for exploitation.36dCVE-2026-419855.1 MED0.1%
——0UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.35dCVE-2025-21431—0.1%
——0——CVE-2025-27041—0.1%
——0——CVE-2017-13314—0.1%
——0——CVE-2026-28547—0.1%
——0——CVE-2026-54055—0.1%
——0——CVE-2025-31356—0.1%
——0Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.15dCVE-2017-13311—0.1%
——0——CVE-2017-13312—0.1%
——0——CVE-2023-48420—0.1%
——0——CVE-2025-47380—0.1%
——0——CVE-2025-47386—0.1%
——0——CVE-2026-75946—0.1%
——0A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.6dCVE-2026-00367.8 HIG0.1%
——0In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.36dCVE-2026-49365.1 MED0.1%
——0IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.2dCVE-2025-54422—0.1%
——0——CVE-2024-9858—0.1%
——0——CVE-2021-0696—0.1%
——0——CVE-2024-47028—0.1%
——0——CVE-2025-20805—0.1%
——0——CVE-2025-32317—0.1%
——0——CVE-2026-167926.1 MED0.1%
——0An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.3dCVE-2026-0134—0.1%
——0——CVE-2024-34732—0.1%
——0——CVE-2025-20796—0.1%
——0——CVE-2026-462984.7 MED0.1%
——0In the Linux kernel, the following vulnerability has been resolved:
pseries/papr-hvpipe: Fix race with interrupt handler
While executing ->ioctl handler or ->release handler, if an interrupt
fires on the same cpu, then we can enter into a deadlock.
This patch fixes both these handlers to take spin_lock_irq{save|restore}
versions of the lock to prevent this deadlock.35dCVE-2025-20804—0.1%
——0——CVE-2025-20788—0.1%
——0——CVE-2025-47369—0.1%
——0——CVE-2024-47029—0.1%
——0——CVE-2025-20799—0.1%
——0——CVE-2026-20424—0.1%
——0——CVE-2026-00937.8 HIG0.1%
——0In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.36d