CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,634 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
25,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2019-0803 KEV EXP | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | Patch first | 7.8 high | 45.2% | 2019-04-09 |
| CVE-2016-3235 KEV EXP | Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which al… | Patch first | 7.8 high | 43.3% | 2016-06-16 |
| CVE-2019-0841 KEV EXP | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of… | Patch first | 7.8 high | 41.4% | 2019-04-09 |
| CVE-2023-29336 KEV EXP | Win32k Elevation of Privilege Vulnerability | Patch first | 7.8 high | 41.2% | 2023-05-09 |
| CVE-2013-6282 KEV EXP | The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, wh… | Patch first | 8.8 high | 39.7% | 2013-11-20 |
| CVE-2013-3660 KEV EXP | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vi… | Patch first | 7.8 high | 39.3% | 2013-05-24 |
| CVE-2018-13374 KEV EXP | A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LD… | Patch first | 4.3 medium | 38.1% | 2019-01-22 |
| CVE-2019-11707 KEV EXP | A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We… | Patch first | 8.8 high | 38% | 2019-07-23 |
| CVE-2014-3153 KEV EXP | The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which a… | Patch first | 7.8 high | 37.2% | 2014-06-07 |
| CVE-2016-0099 KEV EXP | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a… | Patch first | 7.8 high | 37% | 2016-03-09 |
| CVE-2020-5735 KEV EXP | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to cras… | Patch first | 8.8 high | 36.2% | 2020-04-08 |
| CVE-2017-6327 KEV EXP | The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual ma… | Patch first | 8.8 high | 35.9% | 2017-08-11 |
| CVE-2013-5065 KEV EXP | NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as… | Patch first | 7.8 high | 34.7% | 2013-11-28 |
| CVE-2008-4128 KEV EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Route… | Patch first | 8.1 high | 33.9% | 2008-09-18 |
| CVE-2016-4655 KEV EXP | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | Patch first | 5.5 medium | 33.4% | 2016-08-25 |
| CVE-2017-6884 KEV EXP | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the d… | Patch first | 8.8 high | 33% | 2017-04-06 |
| CVE-2011-2005 KEV EXP | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to… | Patch first | 7.8 high | 31.8% | 2011-10-12 |
| CVE-2026-56290 KEV EXP | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable… | Patch first | 9.8 critical | 30.9% | 2026-06-29 |
| CVE-2025-26633 KEV EXP | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. | Patch first | 7.0 high | 30.4% | 2025-03-11 |
| CVE-2019-1405 KEV EXP | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Win… | Patch first | 7.8 high | 30.2% | 2019-11-12 |
| CVE-2018-2380 KEV EXP | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characte… | Patch first | 6.6 medium | 28.9% | 2018-03-01 |
| CVE-2010-0232 KEV EXP | The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G… | Patch first | 7.8 high | 28.7% | 2010-01-21 |
| CVE-2026-9198 KEV EXP | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with… | Patch first | 9.8 critical | 28.7% | 2026-07-17 |
| CVE-2024-38193 KEV EXP | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Patch first | 7.8 high | 28.5% | 2024-08-13 |
| CVE-2025-30397 KEV EXP | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a net… | Patch first | 7.5 high | 27.5% | 2025-05-13 |
| CVE-2024-49138 KEV EXP | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Patch first | 7.8 high | 26.2% | 2024-12-12 |
| CVE-2016-0040 KEV EXP | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted a… | Patch first | 7.8 high | 24.3% | 2016-02-10 |
| CVE-2016-4656 KEV EXP | The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruptio… | Patch first | 7.8 high | 23.6% | 2016-08-25 |
| CVE-2016-6367 KEV EXP | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges vi… | Patch first | 7.8 high | 22.6% | 2016-08-18 |
| CVE-2020-24363 KEV EXP | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a fact… | Patch first | 8.8 high | 22.2% | 2020-08-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt