CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,570 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2017-0213 KEV EXP | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… | Patch first | 7.3 high | 84.3% | 2017-05-12 |
| CVE-2017-11317 KEV EXP | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remo… | Patch first | 9.8 critical | 84.2% | 2017-08-23 |
| CVE-2009-3129 KEV EXP | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Vi… | Patch first | 7.8 high | 84% | 2009-11-11 |
| CVE-2020-3161 KEV EXP | A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a… | Patch first | 9.8 critical | 83.9% | 2020-04-15 |
| CVE-2016-5195 KEV EXP | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… | Patch first | 7.0 high | 83.5% | 2016-11-10 |
| CVE-2012-1889 KEV EXP | Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or… | Patch first | 8.8 high | 83.5% | 2012-06-13 |
| CVE-2010-1871 KEV EXP | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expr… | Patch first | 8.8 high | 83.4% | 2010-08-05 |
| CVE-2016-10174 KEV EXP | The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffe… | Patch first | 9.8 critical | 83.3% | 2017-01-30 |
| CVE-2009-3953 KEV EXP | The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attacker… | Patch first | 8.8 high | 83.2% | 2010-01-13 |
| CVE-2010-3765 KEV EXP | Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10… | Patch first | 9.8 critical | 83.2% | 2010-10-28 |
| CVE-2025-33073 KEV EXP | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. | Patch first | 8.8 high | 82.8% | 2025-06-10 |
| CVE-2016-7200 KEV EXP | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup… | Patch first | 8.8 high | 82.8% | 2016-11-10 |
| CVE-2015-1187 KEV EXP | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. | Patch first | 9.8 critical | 82.7% | 2017-09-21 |
| CVE-2010-1297 KEV EXP | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x b… | Patch first | 7.8 high | 82.5% | 2010-06-08 |
| CVE-2018-6789 KEV EXP | An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may ha… | Patch first | 9.8 critical | 82.1% | 2018-02-08 |
| CVE-2010-0806 KEV EXP | Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to… | Patch first | 8.8 high | 82.1% | 2010-03-10 |
| CVE-2009-4324 KEV EXP | Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Win… | Patch first | 7.8 high | 81.9% | 2009-12-15 |
| CVE-2018-13382 KEV EXP | An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1… | Patch first | 9.1 critical | 81.7% | 2019-06-04 |
| CVE-2019-0752 KEV EXP | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engin… | Patch first | 7.5 high | 81.7% | 2019-04-09 |
| CVE-2014-4114 KEV EXP | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows R… | Patch first | 7.8 high | 81.6% | 2014-10-15 |
| CVE-2010-2883 KEV EXP | Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote at… | Patch first | 7.3 high | 81.4% | 2010-09-09 |
| CVE-2019-9621 KEV EXP | Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SS… | Patch first | 7.5 high | 81% | 2019-04-30 |
| CVE-2016-7255 KEV EXP | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R… | Patch first | 7.8 high | 81% | 2016-11-10 |
| CVE-2017-0037 KEV EXP | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSp… | Patch first | 8.1 high | 80.4% | 2017-02-26 |
| CVE-2012-4969 KEV EXP | Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execu… | Patch first | 8.1 high | 80.3% | 2012-09-18 |
| CVE-2020-14871 KEV EXP | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 1… | Patch first | 10.0 critical | 80.2% | 2020-10-21 |
| CVE-2016-7201 KEV EXP | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup… | Patch first | 8.8 high | 80% | 2016-11-10 |
| CVE-2021-21551 KEV EXP | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or inf… | Patch first | 8.8 high | 79.6% | 2021-05-04 |
| CVE-2013-4810 KEV EXP | HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attack… | Patch first | 9.8 critical | 79.5% | 2013-09-16 |
| CVE-2013-3346 KEV EXP | Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of… | Patch first | 9.8 critical | 78.9% | 2013-08-30 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt