Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,438
- High15,694
- Medium14,714
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-39727—0.6%
——0——CVE-2026-1040435.5 MED0.6%
——0A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the responder process and resulting in a Denial of Service (DoS).16dCVE-2023-20640—0.6%
——0——CVE-2023-20735—0.6%
——0——CVE-2023-20734—0.6%
——0——CVE-2025-323287.8 HIG0.6%
——0In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15dCVE-2023-20806—0.6%
——0——CVE-2025-323297.8 HIG0.6%
——0In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15dCVE-2026-463247.8 HIG0.6%
——0In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: use list_del_rcu for netlink hooks
nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need
to use list_del_rcu(), this list can be walked by concurrent dumpers.
Add a new helper and use it consistently.3dCVE-2026-463117.8 HIG0.6%
——0In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/userq: fix access to stale wptr mapping
Use drm_exec to take both locks i.e vm root bo and
wptr_obj bo to access the mapping data properly.
This fixes the security issue of unmap the wptr_obj while
a queue creation is in progress and passing other
bo at same address.
(cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)3dCVE-2023-42734—0.6%
——0——CVE-2023-20816—0.6%
——0——CVE-2023-20666—0.6%
——0——CVE-2023-20673—0.6%
——0——CVE-2025-474007.1 HIG0.6%
——0Cryptographic issue while copying data to a destination buffer without validating its size.15dCVE-2023-20738—0.6%
——0——CVE-2022-20326—0.6%
——0——CVE-2023-20718—0.6%
——0——CVE-2025-35991—0.6%
——0Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.8dCVE-2026-1109095.0 MED0.6%
——0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console also probes common ports when the project server is down. Other commands can perform unintended state-changing operations against a different local application's server and database. Exploitation requires a process listening on a targeted local port and the developer running an affected command. This is fixed in 4.1.1, including changes to the CLI and application template.2dCVE-2023-20661—0.6%
——0——CVE-2025-0083—0.6%
——0——CVE-2023-21064—0.6%
——0——CVE-2022-33716—0.6%
——0——CVE-2024-27220—0.6%
——0——CVE-2023-20638—0.6%
——0——CVE-2023-20659—0.6%
——0——CVE-2023-21071—0.6%
——0——CVE-2026-43147—0.6%
——0——CVE-2022-20263—0.6%
——0——CVE-2023-20682—0.6%
——0——CVE-2023-42732—0.6%
——0——CVE-2023-20650—0.6%
——0——CVE-2023-21052—0.6%
——0——CVE-2022-20259—0.6%
——0——CVE-2025-31957—0.6%
——0——CVE-2023-53447—0.6%
——0——CVE-2025-40753—0.6%
——0——CVE-2022-20298—0.6%
——0——CVE-2022-20300—0.6%
——0——