Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,436
- High15,682
- Medium14,709
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-102710—0.6%
——0Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE_EVENT_TRACE`.
A user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls it directly — no validation, no trampoline — from privileged kernel code when the trace buffer wraps.
An invalid pointer faults the kernel (DoS). A pointer into the module's own code was observed running with kernel privilege (`CONTROL.nPRIV = 0`), confirmed at runtime with a register capture inside that code.23dCVE-2024-47124—0.6%
——0——CVE-2023-42697—0.6%
——0——CVE-2026-1040355.5 MED0.6%
——0A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when credentials are removed, memory consumption grows continuously, ultimately exhausting available memory and rendering the service unresponsive.14dCVE-2023-42699—0.6%
——0——CVE-2022-20241—0.6%
——0——CVE-2023-32814—0.6%
——0——CVE-2025-485837.8 HIG0.6%
——0In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15dCVE-2026-0024—0.6%
——0——CVE-2026-766664.7 MED0.6%
——0A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.7dCVE-2019-2231—0.6%
——0——CVE-2023-40137—0.6%
——0——CVE-2026-569926.7 MED0.6%
——0In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.34dCVE-2023-20993—0.6%
——0——CVE-2025-369287.8 HIG0.6%
——0In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15dCVE-2026-180667.9 HIG0.6%
——0IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.14dCVE-2022-47462—0.6%
——0——CVE-2025-22433—0.6%
——0——CVE-2026-46194—0.6%
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.6dCVE-2026-20993—0.6%
——0——CVE-2023-42698—0.6%
——0——CVE-2023-42701—0.6%
——0——CVE-2026-636235.5 MED0.6%
——0A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.69dCVE-2022-39131—0.6%
——0——CVE-2025-68970—0.6%
——0——CVE-2026-499327.8 HIG0.6%
——0In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.28dCVE-2026-869325.5 MED0.6%
——0An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.2dCVE-2023-20989—0.6%
——0——CVE-2026-569226.7 MED0.6%
——0In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.31dCVE-2023-20969—0.6%
——0——CVE-2026-586986.7 MED0.6%
——0In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.34dCVE-2022-20249—0.6%
——0——CVE-2026-869555.5 MED0.6%
——0An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.2dCVE-2022-20341—0.6%
——0——CVE-2026-42487—0.6%
——0——CVE-2023-32815—0.6%
——0——CVE-2023-21017—0.6%
——0——CVE-2023-21008—0.6%
——0——CVE-2023-42678—0.6%
——0——CVE-2026-570426.7 MED0.6%
——0In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.34d