CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,477 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,094 with exploits
synced 2026-11-11
209 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-27834 KEV | The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma… | Patch first | 5.5 medium | 1.5% | 2024-05-14 |
| CVE-2025-61624 KEV | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, Fort… | Patch first | 6.0 medium | 1.4% | 2026-04-14 |
| CVE-2025-35939 KEV | Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an… | Patch first | 5.3 medium | 1.4% | 2025-05-07 |
| CVE-2025-43200 KEV | This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPa… | Patch first | 4.2 medium | 1.2% | 2025-06-16 |
| CVE-2023-36851 KEV | A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attac… | Patch first | 5.3 medium | 1.1% | 2023-09-27 |
| CVE-2026-7473 KEV | On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Ge… | Patch first | 5.8 medium | 1.1% | 2026-06-05 |
| CVE-2022-22674 KEV | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixe… | Patch first | 5.5 medium | 1.1% | 2022-05-26 |
| CVE-2021-25369 KEV | An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | Patch first | 6.2 medium | 1.1% | 2021-03-26 |
| CVE-2026-56164 KEV | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | Patch first | 5.3 medium | 1% | 2026-07-14 |
| CVE-2023-4211 KEV | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | Patch first | 5.5 medium | 1% | 2023-10-01 |
| CVE-2026-110936 KEV | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs)… | Patch first | 6.7 medium | 1% | 2026-10-15 |
| CVE-2021-25370 KEV | An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel pani… | Patch first | 6.1 medium | 0.9% | 2021-03-26 |
| CVE-2021-0920 KEV | In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with… | Patch first | 6.4 medium | 0.9% | 2021-12-15 |
| CVE-2026-118527 KEV | Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files wit… | Patch first | 4.3 medium | 0.8% | 2026-11-03 |
| CVE-2024-50302 KEV | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by… | Patch first | 5.5 medium | 0.8% | 2024-11-19 |
| CVE-2021-25372 KEV | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | Patch first | 6.1 medium | 0.8% | 2021-03-26 |
| CVE-2021-25371 KEV | A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | Patch first | 6.1 medium | 0.8% | 2021-03-26 |
| CVE-2025-1976 KEV | Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary… | Patch first | 6.7 medium | 0.7% | 2025-04-24 |
| CVE-2026-66384 KEV | An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | Patch first | 5.3 medium | 0.7% | 2026-08-12 |
| CVE-2026-111793 KEV | Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may al… | Patch first | 4.3 medium | 0.6% | 2026-10-16 |
| CVE-2025-48928 KEV | The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a p… | Patch first | 4.0 medium | 0.6% | 2025-05-28 |
| CVE-2021-1906 KEV | Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdra… | Patch first | 6.2 medium | 0.5% | 2021-05-07 |
| CVE-2024-29745 KEV | there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution pri… | Patch first | 5.5 medium | 0.5% | 2024-04-05 |
| CVE-2025-43520 KEV | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1,… | Patch first | 5.5 medium | 0.4% | 2025-12-12 |
| CVE-2022-22265 KEV | An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution… | Patch first | 5.0 medium | 0.4% | 2022-01-10 |
| CVE-2021-25394 KEV | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege… | Patch first | 6.4 medium | 0.4% | 2021-06-11 |
| CVE-2021-25395 KEV | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is com… | Patch first | 6.4 medium | 0.4% | 2021-06-11 |
| CVE-2023-21237 KEV | In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insuffici… | Patch first | 5.5 medium | 0.3% | 2023-06-28 |
| CVE-2025-48633 KEV | In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in t… | Patch first | 5.5 medium | 0.3% | 2025-12-08 |
← previous page 7 of 7
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt