Vulnerabilities exploitable today
401,677in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,475
- High15,877
- Medium15,016
- Low1,480
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-21042—0.7%
——0——CVE-2022-32626—0.7%
——0——CVE-2022-32634—0.7%
——0——CVE-2023-42681—0.7%
——0——CVE-2024-43083—0.7%
——0——CVE-2022-20274—0.7%
——0——CVE-2021-25460—0.7%
——0——CVE-2022-0317—0.7%
——0——CVE-2025-486515.5 MED0.7%
——0In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.44dCVE-2023-42745—0.7%
——0——CVE-2026-553237.8 HIG0.7%
——0In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.31dCVE-2023-48402—0.7%
——0——CVE-2025-26455—0.7%
——0——CVE-2026-570147.8 HIG0.7%
——0In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.34dCVE-2017-13315—0.7%
——0——CVE-2026-798234.0 MED0.7%
——0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.7dCVE-2022-48235—0.7%
——0——CVE-2022-47485—0.7%
——0——CVE-2026-286537.8 HIG0.7%
——0In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.37dCVE-2023-313083.3 LOW0.7%
——0A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.49dCVE-2026-188583.3 LOW0.7%
——0IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.44dCVE-2022-48373—0.7%
——0——CVE-2023-42747—0.7%
——0——CVE-2026-775723.3 LOW0.7%
——0VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys driver accept caller-supplied object-manager and device paths broader than supported VeraCrypt workflows require. A local user who can open the intentionally user-accessible \.\VeraCrypt device can use TC_IOCTL_GET_RESOLVED_SYMLINK, TC_IOCTL_GET_DRIVE_PARTITION_INFO, VC_IOCTL_GET_DRIVE_GEOMETRY_EX, or the legacy TC_IOCTL_GET_DRIVE_GEOMETRY handler to make src/Driver/Ntdriver.c perform kernel-context symbolic-link or disk-device lookups outside the intended path scope. This can disclose low-sensitivity drive-letter targets, partition information, disk geometry, GPT or MBR state, and limited object-manager path metadata.6dCVE-2023-21171—0.7%
——0——CVE-2023-21158—0.7%
——0——CVE-2022-47491—0.7%
——0——CVE-2026-531927.8 HIG0.7%
——0In the Linux kernel, the following vulnerability has been resolved:
ALSA: timer: Fix UAF at snd_timer_user_params()
At releasing a timer object, e.g. when a userspace timer
(CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it
tries to detach the timer instances and release the resources.
However, it's still possible that other in-flight tasks are holding
the timer instance where the to-be-deleted timer object is associated,
and this may lead to racy accesses.
Fortunately, most of ioctls dealing with the timer instance list
already have the protection with register_mutex, and this also avoids
such races. But, SNDRV_TIMER_IOCTL_PARAMS isn't protected, hence the
concurrent ioctl may lead to use-after-free.
This patch just adds the guard with register_mutex to protect
snd_timer_user_params() for covering the code path as a quick
workaround. It's no hot-path but rather a rarely issued ioctl, so the
performance penalty doesn't matter.3dCVE-2026-618722.5 LOW0.7%
——0ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.99dCVE-2022-47499—0.7%
——0——CVE-2023-21203—0.7%
——0——CVE-2023-21081—0.7%
——0——CVE-2025-52643—0.7%
——0——CVE-2023-21153—0.7%
——0——CVE-2022-48385—0.7%
——0——CVE-2024-43089—0.7%
——0——CVE-2022-47496—0.7%
——0——CVE-2025-26424—0.7%
——0——CVE-2022-20328—0.7%
——0——CVE-2026-21372—0.7%
——0——