CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,905 CVEs
1,779 on KEV
17,545 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
926 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-3910 KEV | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a… | Patch first | 8.8 high | 2.7% | 2026-03-13 |
| CVE-2021-27102 KEV | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. | Patch first | 7.8 high | 2.7% | 2021-02-16 |
| CVE-2024-38226 KEV | Microsoft Publisher Security Feature Bypass Vulnerability | Patch first | 7.3 high | 2.7% | 2024-09-10 |
| CVE-2020-24557 KEV | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particula… | Patch first | 7.8 high | 2.7% | 2020-09-01 |
| CVE-2023-35674 KEV | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local es… | Patch first | 7.8 high | 2.6% | 2023-09-11 |
| CVE-2019-6223 KEV | A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1… | Patch first | 7.5 high | 2.6% | 2019-03-05 |
| CVE-2022-41073 KEV | Windows Print Spooler Elevation of Privilege Vulnerability | Patch first | 7.8 high | 2.6% | 2022-11-09 |
| CVE-2023-0266 KEV | A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be us… | Patch first | 7.9 high | 2.6% | 2023-01-30 |
| CVE-2026-21519 KEV | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.6% | 2026-02-10 |
| CVE-2022-21919 KEV | Windows User Profile Service Elevation of Privilege Vulnerability | Patch first | 7.0 high | 2.6% | 2022-01-11 |
| CVE-2020-0638 KEV | An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker wou… | Patch first | 7.8 high | 2.5% | 2020-01-14 |
| CVE-2026-106931 KEV | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYS… | Patch first | 7.8 high | 2.5% | 2026-10-14 |
| CVE-2025-3928 KEV | Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory:… | Patch first | 8.8 high | 2.5% | 2025-04-25 |
| CVE-2025-62221 KEV | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.5% | 2025-12-09 |
| CVE-2025-30154 KEV | reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 U… | Patch first | 8.6 high | 2.5% | 2025-03-19 |
| CVE-2026-11645 KEV | Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a… | Patch first | 8.8 high | 2.4% | 2026-06-09 |
| CVE-2018-4344 KEV | A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watc… | Patch first | 7.8 high | 2.4% | 2019-04-03 |
| CVE-2020-9818 KEV | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5.… | Patch first | 8.8 high | 2.3% | 2020-06-09 |
| CVE-2025-32706 KEV | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.3% | 2025-05-13 |
| CVE-2026-3909 KEV | Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… | Patch first | 8.8 high | 2.3% | 2026-03-13 |
| CVE-2025-8875 KEV | Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. | Patch first | 7.8 high | 2.3% | 2025-08-14 |
| CVE-2019-0880 KEV | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerab… | Patch first | 7.8 high | 2.3% | 2019-07-15 |
| CVE-2025-21391 KEV | Windows Storage Elevation of Privilege Vulnerability | Patch first | 7.1 high | 2.3% | 2025-02-11 |
| CVE-2025-21043 KEV | Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | Patch first | 8.8 high | 2.2% | 2025-09-12 |
| CVE-2025-24993 KEV | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | Patch first | 7.8 high | 2.2% | 2025-03-11 |
| CVE-2021-1782 KEV | A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 20… | Patch first | 7.0 high | 2.2% | 2021-04-02 |
| CVE-2026-0322 KEV | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with… | Patch first | 7.2 high | 2.1% | 2026-10-14 |
| CVE-2025-21418 KEV | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Patch first | 7.8 high | 2.1% | 2025-02-11 |
| CVE-2020-2506 KEV | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers… | Patch first | 7.3 high | 2% | 2021-02-03 |
| CVE-2023-41974 KEV | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An ap… | Patch first | 7.8 high | 2% | 2024-01-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt