Vulnerabilities exploitable today
401,738in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,667
Distribution · last window
- Critical3,399
- High15,528
- Medium14,782
- Low1,421
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-32882—1.3%
——0——CVE-2022-21751—1.3%
——0——CVE-2021-39631—1.3%
——0——CVE-2022-21750—1.3%
——0——CVE-2021-23243—1.3%
——0——CVE-2021-39773—1.3%
——0——CVE-2021-39775—1.3%
——0——CVE-2022-20286—1.3%
——0——CVE-2023-32861—1.3%
——0——CVE-2022-21752—1.3%
——0——CVE-2025-1139—1.3%
——0——CVE-2023-32868—1.3%
——0——CVE-2023-20780—1.3%
——0——CVE-2026-437557.0 HIG1.3%
——0A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.87dCVE-2026-845504.7 MED1.3%
——0A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.37dCVE-2025-70055.5 MED1.3%
——0Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25031700.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.16dCVE-2024-34726—1.3%
——0——CVE-2023-32864—1.3%
——0——CVE-2026-43430—1.3%
——0——CVE-2023-0460—1.3%
——0——CVE-2025-46588—1.3%
——0——CVE-2023-43531—1.3%
——0——CVE-2025-21029—1.3%
——0——CVE-2023-30673—1.3%
——0——CVE-2026-43942—1.3%
——0——CVE-2023-42722—1.3%
——0——CVE-2023-32863—1.3%
——0——CVE-2023-32853—1.3%
——0——CVE-2024-0042—1.3%
——0——CVE-2026-205155.5 MED1.3%
——0In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.45dCVE-2026-148377.8 HIG1.3%
——0Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.85dCVE-2023-32869—1.3%
——0——CVE-2023-31324—1.3%
——0——CVE-2023-33066—1.3%
——0——CVE-2026-21130—1.3%
——0Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.8dCVE-2026-735866.4 MED1.3%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.28dCVE-2026-189094.7 MED1.3%
——0A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarded to ETD.sys where it is used as a loop counter for a stack buffer copy without destination size validation. A local attacker with standard user privileges can trigger a kernel bugcheck (BSOD 0xF7 DRIVER_OVERRAN_STACK_BUFFER), resulting in denial of service. This issue affects ELAN Smart-Pad through ETD24.21.52.3.50dCVE-2026-419795.5 MED1.3%
——0Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.92dCVE-2021-39777—1.3%
——0——CVE-2025-363646.2 MED1.2%
——0IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.88d