CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,330 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,094 with exploits
synced 2026-11-11
209 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-2055 KEV | Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribu… | Patch first | 5.9 medium | 3.3% | 2009-08-19 |
| CVE-2022-41049 KEV | Windows Mark of the Web Security Feature Bypass Vulnerability | Patch first | 5.4 medium | 3.3% | 2022-11-09 |
| CVE-2023-36584 KEV | Windows Mark of the Web Security Feature Bypass Vulnerability | Patch first | 5.4 medium | 3.3% | 2023-10-10 |
| CVE-2020-9934 KEV | An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPad… | Patch first | 5.5 medium | 3.2% | 2020-10-16 |
| CVE-2023-6548 KEV | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP… | Patch first | 5.5 medium | 3.2% | 2024-01-17 |
| CVE-2011-4723 KEV | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors… | Patch first | 5.7 medium | 3.1% | 2011-12-20 |
| CVE-2021-27562 KEV | In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when ca… | Patch first | 5.5 medium | 3.1% | 2021-05-25 |
| CVE-2021-31199 KEV | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | Patch first | 5.2 medium | 3% | 2021-06-08 |
| CVE-2023-38606 KEV | This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPad… | Patch first | 5.5 medium | 2.9% | 2023-07-27 |
| CVE-2021-25337 KEV | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write… | Patch first | 4.4 medium | 2.8% | 2021-03-04 |
| CVE-2025-40602 KEV | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | Patch first | 6.6 medium | 2.8% | 2025-12-18 |
| CVE-2020-0878 KEV | <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in… | Patch first | 4.2 medium | 2.7% | 2020-09-11 |
| CVE-2021-31201 KEV | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | Patch first | 5.2 medium | 2.6% | 2021-06-08 |
| CVE-2023-21492 KEV | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | Patch first | 4.4 medium | 2.6% | 2023-05-04 |
| CVE-2023-20109 KEV | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authentica… | Patch first | 6.6 medium | 2.5% | 2023-09-27 |
| CVE-2026-67279 KEV | RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenti… | Patch first | 6.5 medium | 2.3% | 2026-09-05 |
| CVE-2022-41091 KEV | Windows Mark of the Web Security Feature Bypass Vulnerability | Patch first | 5.4 medium | 2.3% | 2022-11-09 |
| CVE-2020-9819 KEV | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, wa… | Patch first | 4.3 medium | 2.2% | 2020-06-09 |
| CVE-2017-12232 KEV | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through… | Patch first | 6.5 medium | 2.2% | 2017-09-29 |
| CVE-2017-6663 KEV | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… | Patch first | 6.5 medium | 2.1% | 2017-08-07 |
| CVE-2025-24991 KEV | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | Patch first | 5.5 medium | 2% | 2025-03-11 |
| CVE-2017-12238 KEV | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an u… | Patch first | 6.5 medium | 2% | 2017-09-29 |
| CVE-2025-0111 KEV | An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the manage… | Patch first | 6.5 medium | 2% | 2025-02-12 |
| CVE-2025-24984 KEV | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | Patch first | 4.6 medium | 2% | 2025-03-11 |
| CVE-2025-59689 KEV | Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.3… | Patch first | 6.1 medium | 2% | 2025-09-19 |
| CVE-2026-96654 KEV | Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' fu… | Patch first | 6.5 medium | 1.9% | 2026-09-23 |
| CVE-2025-21590 KEV | An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to… | Patch first | 4.4 medium | 1.7% | 2025-03-12 |
| CVE-2025-48700 KEV | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Class… | Patch first | 6.1 medium | 1.7% | 2025-06-23 |
| CVE-2024-39891 KEV | In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain p… | Patch first | 5.3 medium | 1.7% | 2024-07-02 |
| CVE-2026-124194 KEV | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | Patch first | 6.5 medium | 1.6% | 2026-11-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt