Vulnerabilidades exploráveis hoje
409,857na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,527
- Alta21,044
- Média20,197
- Baixa2,086
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-819637.8 ALT33.8%
KEV—60Microsoft Windows Link Following Vulnerability60dCVE-2026-858807.8 ALT33.1%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability44dCVE-2021-25395—30.7%
KEV—59Samsung Mobile Devices Race Condition Vulnerability—CVE-2025-435107.8 ALT29.5%
KEV—59Apple Multiple Products Improper Locking Vulnerability32dCVE-2026-561557.8 ALT28.4%
KEV—59Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 116dCVE-2023-21237—18.6%
KEV—56Android Pixel Information Disclosure Vulnerability —CVE-2025-486335.5 MÉD17.8%
KEV—55Android Framework Information Disclosure Vulnerability31dCVE-2025-485727.8 ALT17.7%
KEV—55Android Framework Privilege Escalation Vulnerability31dCVE-2026-878867.8 ALT14.3%
KEV—54Acronis Backup Incorrect Default Permissions Vulnerability50dCVE-2012-1459—100.0%
——30——CVE-2014-3566—100.0%
——30——CVE-2021-451055.9 MÉD100.0%
——30Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.74dCVE-2023-50387—100.0%
——30——CVE-2008-2938—100.0%
——30——CVE-2020-10220—100.0%
——30——CVE-2012-1443—100.0%
——30——CVE-2024-29825—100.0%
——30——CVE-2014-3704—100.0%
——30——CVE-2023-27372—100.0%
——30——CVE-2015-4000—100.0%
——30——CVE-2025-53771—100.0%
——30——CVE-2014-0195—100.0%
——30——CVE-2019-02328.1 ALT100.0%
——30When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).5dCVE-2022-39952—100.0%
——30——CVE-2017-12635—100.0%
——30——CVE-2017-8917—100.0%
——30——CVE-2012-1456—100.0%
——30——CVE-2015-7297—100.0%
——30——CVE-2022-42889—100.0%
——30——CVE-2012-1457—100.0%
——30——CVE-2024-29823—100.0%
——30——CVE-2020-14181—100.0%
——30——CVE-2024-29826—100.0%
——30——CVE-2020-13379—100.0%
——30——CVE-2023-32560—99.9%
——30——CVE-2022-39986—99.9%
——30——CVE-2017-1000028—99.9%
——30——CVE-2023-23333—99.9%
——30——CVE-2019-11477—99.9%
——30——CVE-2023-28341—99.9%
——30——