Vulnerabilities exploitable today
377,415in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,716
New KEV · 24H3
Exploit Today ≥ 701,647
Distribution · last window
- Critical2,355
- High8,510
- Medium6,633
- Low715
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-36751—0.1%
——0——CVE-2026-41964—0.1%
——0——CVE-2022-20219—0.1%
——0——CVE-2025-40680—0.1%
——0——CVE-2024-49840—0.1%
——0——CVE-2026-108133.6 LOW0.1%
——0A flaw has been found in LMCache up to 0.4.6. This affects the function hex_hash_to_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.58dCVE-2026-553656.7 MED0.1%
——0In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.2dCVE-2026-4482—0.1%
——0——CVE-2026-0108—0.1%
——0——CVE-2024-29778—0.1%
——0——CVE-2023-20745—0.1%
——0——CVE-2018-9344—0.1%
——0——CVE-2026-00435.5 MED0.1%
——0In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.59dCVE-2026-35374—0.1%
——0——CVE-2026-108003.6 LOW0.1%
——0A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the component MultimodalHasher. Executing a manipulation can lead to use of weak hash. The attack requires local access. A high complexity level is associated with this attack. The exploitation is known to be difficult. This patch is called 374945747652a8d32965591c0c01a00c88b7067f. Applying a patch is advised to resolve this issue.58dCVE-2026-108123.6 LOW0.1%
——0A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument input_data["image"] results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. The exploitation is known to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.58dCVE-2025-596067.8 HIG0.1%
——0Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.58dCVE-2026-01007.8 HIG0.1%
——0In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.58dCVE-2026-28547—0.1%
——0——CVE-2025-20980—0.1%
——0——CVE-2026-24082—0.1%
——0——CVE-2026-418608.8 HIG0.1%
——0CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attacker to intercept traffic between bosh-monitor and the BOSH director or UAA and steal credentials.
Affected versions:
- BOSH: all versions prior to v282.1.9 (inclusive); fixed in v282.1.9 or later58dCVE-2026-40539—0.1%
——0——CVE-2026-553326.7 MED0.1%
——0In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.2dCVE-2023-21179—0.1%
——0——CVE-2026-419784.4 MED0.1%
——0Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.58dCVE-2025-20730—0.1%
——0——CVE-2025-21455—0.1%
——0——CVE-2026-252778.8 HIG0.1%
——0Memory corruption while using Strongbox due to buffer overflow.58dCVE-2026-43053—0.1%
——0——CVE-2026-261037.1 HIG0.1%
——0A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.66dCVE-2026-24929—0.1%
——0——CVE-2026-21382—0.1%
——0——CVE-2026-21380—0.1%
——0——CVE-2024-53018—0.1%
——0——CVE-2025-20765—0.1%
——0——CVE-2026-737472.5 LOW0.1%
——0A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.16dCVE-2022-26428—0.1%
——0——CVE-2026-49365.1 MED0.1%
——0IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.24dCVE-2026-3428—0.1%
——0——