Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,435
- High15,665
- Medium14,704
- Low1,444
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-20274—0.7%
——0——CVE-2021-25460—0.7%
——0——CVE-2023-21081—0.7%
——0——CVE-2022-0317—0.7%
——0——CVE-2025-26424—0.7%
——0——CVE-2022-47499—0.7%
——0——CVE-2024-43089—0.7%
——0——CVE-2023-21153—0.7%
——0——CVE-2022-48385—0.7%
——0——CVE-2025-52643—0.7%
——0——CVE-2021-0975—0.7%
——0——CVE-2022-48373—0.7%
——0——CVE-2022-47491—0.7%
——0——CVE-2022-48235—0.7%
——0——CVE-2023-313083.3 LOW0.7%
——0A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.49dCVE-2026-286537.8 HIG0.7%
——0In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.37dCVE-2026-188583.3 LOW0.7%
——0IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.44dCVE-2022-47485—0.7%
——0——CVE-2026-618722.5 LOW0.7%
——0ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.99dCVE-2024-20085—0.7%
——0——CVE-2025-26455—0.7%
——0——CVE-2026-531927.8 HIG0.7%
——0In the Linux kernel, the following vulnerability has been resolved:
ALSA: timer: Fix UAF at snd_timer_user_params()
At releasing a timer object, e.g. when a userspace timer
(CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it
tries to detach the timer instances and release the resources.
However, it's still possible that other in-flight tasks are holding
the timer instance where the to-be-deleted timer object is associated,
and this may lead to racy accesses.
Fortunately, most of ioctls dealing with the timer instance list
already have the protection with register_mutex, and this also avoids
such races. But, SNDRV_TIMER_IOCTL_PARAMS isn't protected, hence the
concurrent ioctl may lead to use-after-free.
This patch just adds the guard with register_mutex to protect
snd_timer_user_params() for covering the code path as a quick
workaround. It's no hot-path but rather a rarely issued ioctl, so the
performance penalty doesn't matter.3dCVE-2017-13315—0.7%
——0——CVE-2026-21376—0.7%
——0——CVE-2022-47469—0.7%
——0——CVE-2022-48238—0.7%
——0——CVE-2025-473917.8 HIG0.7%
——0Memory corruption while processing a frame request from user.15dCVE-2023-42740—0.7%
——0——CVE-2026-285807.8 HIG0.7%
——0In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.92dCVE-2023-40114—0.7%
——0——CVE-2026-168217.0 HIG0.7%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.50dCVE-2025-68966—0.7%
——0——CVE-2026-553517.8 HIG0.7%
——0In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.31dCVE-2026-588397.8 HIG0.7%
——0In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.28dCVE-2024-33027—0.7%
——0——CVE-2022-47498—0.7%
——0——CVE-2022-47494—0.7%
——0——CVE-2024-395757.4 HIG0.7%
——0update_disk_psu_baseline.sh requires password in plain text21dCVE-2023-21192—0.7%
——0——CVE-2024-38642—0.7%
——0——