Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,401
- High15,534
- Medium14,799
- Low1,422
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-22276—0.9%
——0——CVE-2023-42682—0.9%
——0——CVE-2024-53025—0.9%
——0——CVE-2022-50277—0.9%
——0——CVE-2026-41164—0.9%
——0——CVE-2023-42731—0.9%
——0——CVE-2026-20409—0.9%
——0——CVE-2022-26426—0.9%
——0——CVE-2025-93178.4 HIG0.9%
——0The vulnerability, if exploited, could allow a miscreant with read
access to Edge Project files or Edge Offline Cache files to reverse
engineer Edge users' app-native or Active Directory passwords through
computational brute-forcing of weak hashes.4dCVE-2025-54608—0.9%
——0——CVE-2024-31313—0.9%
——0——CVE-2023-21341—0.9%
——0——CVE-2026-586918.4 HIG0.9%
——0In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.34dCVE-2022-22272—0.9%
——0——CVE-2026-730642.9 LOW0.9%
——0In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.28dCVE-2024-33031—0.9%
——0——CVE-2026-569708.4 HIG0.9%
——0In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.34dCVE-2024-33029—0.9%
——0——CVE-2025-58401—0.9%
——0——CVE-2026-638027.8 HIG0.9%
——0In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix UAF in __blkcg_rstat_flush()
When multiple blkgs in the same blkcg are released concurrently,
a use-after-free can occur. The race happens when one blkg's
__blkcg_rstat_flush() removes another blkg's iostat entries via
llist_del_all(). The second blkg sees an empty list and proceeds
to free itself while the first is still iterating over its entries.
Move the flush from __blkg_release() (RCU callback) to blkg_release()
(before call_rcu). This ensures the RCU grace period waits for any
concurrent flush's rcu_read_lock() section to complete before freeing.3dCVE-2026-1075737.8 HIG0.9%
——0Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the permissions inherited from the installation folder, by default under Program Files, which give the local Users group read access. Any user who can sign in to the computer could read every stored message, the logs, the built-in database with the accounts' password hashes whenever the service is stopped, and the configuration file, including the database password, which is sealed only with the machine's DPAPI key and can be unsealed by any local account; with an external database that password gives full control of it. The Linux AppImage of 6.3.0 through 6.3.5 likewise created its per-user data folders readable by other local users.14dCVE-2024-33032—0.9%
——0——CVE-2025-48654—0.9%
——0——CVE-2022-21792—0.9%
——0——CVE-2023-42679—0.9%
——0——CVE-2023-35659—0.9%
——0——CVE-2023-42683—0.9%
——0——CVE-2024-20142—0.9%
——0——CVE-2021-25472—0.9%
——0——CVE-2024-9432—0.9%
——0——CVE-2024-20309—0.9%
——0——CVE-2022-22266—0.9%
——0——CVE-2025-41647—0.9%
——0——CVE-2026-40186.4 MED0.9%
——0TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.99dCVE-2022-22269—0.9%
——0——CVE-2024-38415—0.9%
——0——CVE-2023-42726—0.9%
——0——CVE-2024-38410—0.9%
——0——CVE-2024-33030—0.9%
——0——CVE-2024-0027—0.9%
——0——