CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,657 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
457 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-86060 KEV EXP | RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted… | Patch first | 9.8 critical | 6.4% | 2026-09-05 |
| CVE-2019-0863 KEV EXP | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privi… | Patch first | 7.8 high | 5.2% | 2019-05-16 |
| CVE-2015-5287 KEV EXP | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via… | Patch first | 7.8 high | 5% | 2015-12-07 |
| CVE-2002-0367 KEV EXP | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local… | Patch first | 7.8 high | 4.9% | 2002-06-25 |
| CVE-2019-0543 KEV EXP | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege… | Patch first | 7.8 high | 4.7% | 2019-01-08 |
| CVE-2025-62215 KEV EXP | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate… | Patch first | 7.0 high | 4.5% | 2025-11-11 |
| CVE-2016-3643 KEV EXP | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by… | Patch first | 7.8 high | 3.7% | 2016-06-17 |
← previous page 16 of 16
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt