Vulnerabilities exploitable today
376,337in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,713
New KEV · 24H0
Exploit Today ≥ 701,646
Distribution · last window
- Critical2,383
- High8,771
- Medium6,812
- Low735
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-26430—0.3%
——0——CVE-2023-52536—0.3%
——0——CVE-2024-20051—0.3%
——0——CVE-2025-22850—0.3%
——0——CVE-2022-0247—0.3%
——0——CVE-2024-20116—0.3%
——0——CVE-2026-20988—0.3%
——0——CVE-2026-22614—0.3%
——0——CVE-2024-20125—0.3%
——0——CVE-2022-39885—0.3%
——0——CVE-2026-569708.4 HIG0.3%
——0In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.20hCVE-2026-586918.4 HIG0.3%
——0In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.20hCVE-2026-190794.4 MED0.3%
——0A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker could exploit a race window between the file discovery and the label change operation by swapping directory components with symlinks, causing chcon to follow the symlink and modify SELinux labels on arbitrary system files. This could undermine SELinux mandatory access control protections on critical files such as /etc/shadow.16dCVE-2026-00777.8 HIG0.3%
——0In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.57dCVE-2026-553597.8 HIG0.3%
——0In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.20hCVE-2026-204925.5 MED0.3%
——0In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.29dCVE-2026-148377.8 HIG0.3%
——0Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.49dCVE-2026-586787.8 HIG0.3%
——0In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.20hCVE-2025-36105—0.3%
——0——CVE-2023-21345—0.3%
——0——CVE-2024-20092—0.3%
——0——CVE-2026-45413—0.3%
——0MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute force (hashcat). This vulnerability is fixed in 2.9.1.57dCVE-2026-42408—0.3%
——0——CVE-2025-48628—0.3%
——0——CVE-2024-32907—0.3%
——0——CVE-2024-40669—0.3%
——0——CVE-2025-20747—0.3%
——0——CVE-2026-286687.8 HIG0.3%
——0In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.7dCVE-2022-48444—0.3%
——0——CVE-2018-9376—0.3%
——0——CVE-2024-40656—0.3%
——0——CVE-2023-20726—0.3%
——0——CVE-2026-49324.2 MED0.3%
——0IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.22dCVE-2023-48339—0.3%
——0——CVE-2025-21004—0.3%
——0——CVE-2023-40105—0.3%
——0——CVE-2023-21366—0.3%
——0——CVE-2018-9369—0.3%
——0——CVE-2026-24921—0.3%
——0——CVE-2025-20770—0.3%
——0——