Vulnerabilities exploitable today
401,106in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,438
- High15,697
- Medium14,715
- Low1,446
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-34405——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2023-27883——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused55dCVE-2025-61717——
——0Rejected reason: Not used4dCVE-2025-61720——
——0Rejected reason: Not used4dCVE-2026-977325.1 MED0.0%
——0IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WIN_CERTIFICATE data ("IRONMACE Co., Ltd." and "DigiCert Trusted Root G4") instead of parsing and validating the PKCS signature data. As a result, a local unprivileged attacker may bypass this via crafted certificate data and obtain access to privileged IOCTL functionality.27dCVE-2025-34471——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2023-22352——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused56dCVE-2018-4830——
——0Rejected reason: This candidate is unused by its CNA.4dCVE-2016-7702——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none4dCVE-2025-34470——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-57719——
——0Rejected reason: Not used4dCVE-2025-57720——
——0Rejected reason: Not used4dCVE-2025-34466——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-34465——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2016-4668——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none4dCVE-2016-4636——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none4dCVE-2016-7715——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none6dCVE-2026-49156——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.6dCVE-2025-57721——
——0Rejected reason: Not used4dCVE-2025-57829——
——0Rejected reason: Not used4dCVE-2025-57830——
——0Rejected reason: Not used4dCVE-2025-57831——
——0Rejected reason: Not used4dCVE-2023-27302——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused55dCVE-2023-4143——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.4dCVE-2025-48427——
——0Rejected reason: Not used4dCVE-2025-49209——
——0Rejected reason: Not used4dCVE-2026-64818——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.5dCVE-2023-39942——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused55dCVE-2025-49210——
——0Rejected reason: Not used4dCVE-2025-49815——
——0Rejected reason: Not used4dCVE-2025-21686——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.6dCVE-2026-00947.8 HIG0.0%
——0In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.92dCVE-2025-663333.3 LOW0.0%
——0Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.14dCVE-2025-34371——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-34370——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-34367——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-34366——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-34365——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.4dCVE-2025-46758——
——0Rejected reason: Not used4dCVE-2026-23765——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.6d