Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-2401—0.9%
——0——CVE-2024-45571—0.9%
——0——CVE-2023-40110—0.9%
——0——CVE-2025-15038—0.9%
——0——CVE-2026-240837.8 HIG0.9%
——0Memory Corruption while processing IOCTL device driver requests with invalid arguments.77dCVE-2024-31332—0.9%
——0——CVE-2024-47255—0.9%
——0——CVE-2022-50277—0.9%
——0——CVE-2026-41164—0.9%
——0——CVE-2023-42731—0.9%
——0——CVE-2024-38415—0.9%
——0——CVE-2026-769255.8 MED0.9%
——0A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatpak.SystemHelper` component. This vulnerability occurs because a privileged `chmod` operation executes before the OSTree repository validation within the `Deploy()` function. An attacker can exploit this timing window to redirect symlinks to arbitrary files, potentially leading to unauthorized file manipulation or information disclosure.44dCVE-2022-20320—0.9%
——0——CVE-2025-327515.5 MED0.9%
——0Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information.18dCVE-2026-638027.8 HIG0.9%
——0In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix UAF in __blkcg_rstat_flush()
When multiple blkgs in the same blkcg are released concurrently,
a use-after-free can occur. The race happens when one blkg's
__blkcg_rstat_flush() removes another blkg's iostat entries via
llist_del_all(). The second blkg sees an empty list and proceeds
to free itself while the first is still iterating over its entries.
Move the flush from __blkg_release() (RCU callback) to blkg_release()
(before call_rcu). This ensures the RCU grace period waits for any
concurrent flush's rcu_read_lock() section to complete before freeing.3dCVE-2025-58401—0.9%
——0——CVE-2024-33029—0.9%
——0——CVE-2023-35665—0.9%
——0——CVE-2023-42684—0.9%
——0——CVE-2021-22419—0.9%
——0——CVE-2026-798175.5 MED0.9%
——0A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information.15dCVE-2024-49406—0.9%
——0——CVE-2023-42727—0.9%
——0——CVE-2025-48654—0.9%
——0——CVE-2022-26427—0.9%
——0——CVE-2025-20642—0.9%
——0——CVE-2026-890985.5 MED0.9%
——0A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.3dCVE-2026-529717.8 HIG0.9%
——0In the Linux kernel, the following vulnerability has been resolved:
net: ena: PHC: Fix potential use-after-free in get_timestamp
Move the phc->active check and resp pointer assignment to after
acquiring the spinlock. Previously, phc->active was checked without
holding the lock, and resp was cached from ena_dev->phc.virt_addr
before the lock was acquired.
If ena_com_phc_destroy() runs between the lockless active check and
the lock acquisition, it sets active=false, releases the lock, frees
the DMA memory, and sets virt_addr=NULL. The get_timestamp path would
then read a NULL virt_addr and dereference it.
With both the active check and the pointer read under the lock,
destroy cannot free the memory while get_timestamp is using it.3dCVE-2026-1075737.8 HIG0.9%
——0Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the permissions inherited from the installation folder, by default under Program Files, which give the local Users group read access. Any user who can sign in to the computer could read every stored message, the logs, the built-in database with the accounts' password hashes whenever the service is stopped, and the configuration file, including the database password, which is sealed only with the machine's DPAPI key and can be unsealed by any local account; with an external database that password gives full control of it. The Linux AppImage of 6.3.0 through 6.3.5 likewise created its per-user data folders readable by other local users.14dCVE-2024-33032—0.9%
——0——CVE-2024-33053—0.9%
——0——CVE-2023-21184—0.9%
——0——CVE-2026-1119263.3 LOW0.9%
——0Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this endpoint to read credentials such as cloud keys or registry tokens.3dCVE-2026-20409—0.9%
——0——CVE-2025-54608—0.9%
——0——CVE-2022-26426—0.9%
——0——CVE-2025-93178.4 HIG0.9%
——0The vulnerability, if exploited, could allow a miscreant with read
access to Edge Project files or Edge Offline Cache files to reverse
engineer Edge users' app-native or Active Directory passwords through
computational brute-forcing of weak hashes.4dCVE-2024-31313—0.9%
——0——CVE-2024-33031—0.9%
——0——CVE-2024-23377—0.9%
——0——