Vulnerabilities exploitable today
401,110in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,666
Distribution · last window
- Critical3,438
- High15,695
- Medium14,714
- Low1,445
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-24921—0.6%
——0——CVE-2026-1129116.3 MED0.6%
——0filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created first by another local user in a shared parent directory, allowing that user to alter protocol state and admit concurrent holders. This issue is fixed in version 4.2.1.2dCVE-2023-20977—0.6%
——0——CVE-2023-21377—0.5%
——0——CVE-2023-42737—0.6%
——0——CVE-2025-641225.5 MED0.6%
——0Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.15dCVE-2025-21470—0.6%
——0——CVE-2026-210623.3 LOW0.6%
——0Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.64dCVE-2023-35689—0.6%
——0——CVE-2025-319726.5 MED0.6%
——0HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.26dCVE-2025-22830—0.6%
——0——CVE-2025-47319—0.6%
——0——CVE-2025-21469—0.6%
——0——CVE-2025-20706—0.6%
——0——CVE-2024-21478—0.6%
——0——CVE-2025-26425—0.6%
——0——CVE-2025-546546.2 MED0.6%
——0Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality14dCVE-2026-65055.1 MED0.6%
——0The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.49dCVE-2023-42741—0.6%
——0——CVE-2025-485967.8 HIG0.6%
——0In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.15dCVE-2026-1076784.7 MED0.6%
——0FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption.7dCVE-2025-319632.9 LOW0.6%
——0Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.15dCVE-2024-29749—0.6%
——0——CVE-2025-20707—0.6%
——0——CVE-2025-48630—0.6%
——0——CVE-2024-456364.1 MED0.6%
——0IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.20dCVE-2024-33058—0.6%
——0——CVE-2023-42749—0.6%
——0——CVE-2026-798407.3 HIG0.6%
——0A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.7dCVE-2024-39556—0.6%
——0——CVE-2026-112296.1 MED0.6%
——0Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security severity: Low)91dCVE-2023-21235—0.6%
——0——CVE-2025-20705—0.6%
——0——CVE-2023-21384—0.6%
——0——CVE-2023-20798—0.5%
——0——CVE-2022-20262—0.6%
——0——CVE-2025-27042—0.6%
——0——CVE-2026-210936.7 MED0.6%
——0Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.41dCVE-2023-21194—0.6%
——0——CVE-2023-21196—0.6%
——0——