Vulnerabilities exploitable today
4,330in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,347
- High15,203
- Medium14,178
- Low1,360
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2004-0389—99.0%
——30——CVE-2007-4790—99.0%
——30——CVE-2023-50223—99.0%
——30——CVE-2003-0347—99.0%
——30——CVE-2016-6267—99.0%
——30——CVE-2023-40000—99.0%
——30——CVE-2004-0594—99.0%
——30——CVE-2007-2485—99.0%
——30——CVE-2008-2168—99.0%
——30——CVE-2017-9445—99.0%
——30——CVE-2017-11810—99.0%
——30——CVE-2016-33577.8 HIG99.0%
——30Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."5dCVE-2020-35452—99.0%
——30——CVE-2016-0489—99.0%
——30——CVE-2010-2227—99.0%
——30——CVE-2021-26747—99.0%
——30——CVE-2007-2222—99.0%
——30——CVE-2025-580347.2 HIG99.0%
KEV—80Fortinet FortiWeb OS Command Injection Vulnerability2dCVE-2014-5446—99.0%
——30——CVE-2025-441489.8 CRI99.0%
——30Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component108dCVE-2015-8000—99.0%
——30——CVE-2007-2888—99.0%
——30——CVE-2012-0270—99.0%
——30——CVE-2013-1305—99.0%
——30——CVE-2011-5124—99.0%
——30——CVE-2006-1547—99.0%
KEV—80Apache Struts 1 ActionForm Denial-of-Service Vulnerability—CVE-2007-3897—99.0%
——30——CVE-2021-40728—99.0%
——30——CVE-2007-1765—99.0%
——30——CVE-2009-4223—99.0%
——30——CVE-2021-3277—99.0%
——30——CVE-2014-4077—99.0%
KEV—80Microsoft IME Japanese Privilege Escalation Vulnerability—CVE-2024-38812—99.0%
KEV—80VMware vCenter Server Heap-Based Buffer Overflow Vulnerability—CVE-2017-8657—99.0%
——30——CVE-2022-36267—99.0%
——30——CVE-2016-0984—99.0%
KEV—80Adobe Flash Player and AIR Use-After-Free Vulnerability—CVE-2019-16667—99.0%
——30——CVE-2010-3863—99.0%
——30——CVE-2009-1730—99.0%
——30——CVE-2016-2056—99.0%
——30——