CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
398,514 CVEs
1,726 on KEV
17,265 EPSS ≥ 10%
25,086 with exploits
synced 2026-09-27
450 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-0099 KEV EXP | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a… | Patch first | 7.8 high | 36.8% | 2016-03-09 |
| CVE-2020-5735 KEV EXP | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to cras… | Patch first | 8.8 high | 36.2% | 2020-04-08 |
| CVE-2017-6327 KEV EXP | The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual ma… | Patch first | 8.8 high | 35.9% | 2017-08-11 |
| CVE-2013-5065 KEV EXP | NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as… | Patch first | 7.8 high | 34.7% | 2013-11-28 |
| CVE-2017-6884 KEV EXP | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the d… | Patch first | 8.8 high | 34.4% | 2017-04-06 |
| CVE-2008-4128 KEV EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Route… | Patch first | 8.1 high | 33.9% | 2008-09-18 |
| CVE-2016-4655 KEV EXP | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | Patch first | 5.5 medium | 33.4% | 2016-08-25 |
| CVE-2011-2005 KEV EXP | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to… | Patch first | 7.8 high | 31.5% | 2011-10-12 |
| CVE-2026-56290 KEV EXP | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable… | Patch first | 9.8 critical | 30.9% | 2026-06-29 |
| CVE-2025-26633 KEV EXP | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. | Patch first | 7.0 high | 30.4% | 2025-03-11 |
| CVE-2019-1405 KEV EXP | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Win… | Patch first | 7.8 high | 30% | 2019-11-12 |
| CVE-2018-2380 KEV EXP | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characte… | Patch first | 6.6 medium | 28.9% | 2018-03-01 |
| CVE-2010-0232 KEV EXP | The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G… | Patch first | 7.8 high | 28.7% | 2010-01-21 |
| CVE-2026-9198 KEV EXP | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with… | Patch first | 9.8 critical | 28.7% | 2026-07-17 |
| CVE-2024-38193 KEV EXP | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Patch first | 7.8 high | 28.5% | 2024-08-13 |
| CVE-2025-30397 KEV EXP | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a net… | Patch first | 7.5 high | 26.8% | 2025-05-13 |
| CVE-2024-49138 KEV EXP | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Patch first | 7.8 high | 26.2% | 2024-12-12 |
| CVE-2026-33017 KEV EXP | Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}… | Patch first | 9.8 critical | 24.8% | 2026-03-20 |
| CVE-2016-0040 KEV EXP | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted a… | Patch first | 7.8 high | 24.5% | 2016-02-10 |
| CVE-2021-3560 KEV EXP | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the ro… | Patch first | 7.8 high | 23.7% | 2022-02-16 |
| CVE-2016-4656 KEV EXP | The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruptio… | Patch first | 7.8 high | 23.6% | 2016-08-25 |
| CVE-2016-6367 KEV EXP | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges vi… | Patch first | 7.8 high | 22.6% | 2016-08-18 |
| CVE-2014-0196 KEV EXP | The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST"… | Patch first | 5.5 medium | 22.5% | 2014-05-07 |
| CVE-2020-24363 KEV EXP | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a fact… | Patch first | 8.8 high | 20.7% | 2020-08-31 |
| CVE-2016-3309 KEV EXP | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R… | Patch first | 7.8 high | 20.5% | 2016-08-09 |
| CVE-2019-1215 KEV EXP | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vu… | Patch first | 7.8 high | 19.3% | 2019-09-11 |
| CVE-2019-1322 KEV EXP | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege… | Patch first | 7.8 high | 19.2% | 2019-10-10 |
| CVE-2010-4345 KEV EXP | Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration f… | Patch first | 7.8 high | 18% | 2010-12-14 |
| CVE-2019-8605 KEV EXP | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1.… | Patch first | 7.8 high | 17.6% | 2019-12-18 |
| CVE-2025-24085 KEV EXP | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15… | Patch first | 10.0 critical | 17.5% | 2025-01-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt