CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,671 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
337,095 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-43461 KEV | Windows MSHTML Platform Spoofing Vulnerability | Patch first | 8.8 high | 54.2% | 2024-09-10 |
| CVE-2023-20118 KEV | A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allo… | Patch first | 6.5 medium | 54.1% | 2023-04-13 |
| CVE-2021-31196 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 7.2 high | 54.1% | 2021-07-14 |
| CVE-2020-25079 KEV | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated comman… | Patch first | 8.8 high | 54% | 2020-09-02 |
| CVE-2022-21971 KEV | Windows Runtime Remote Code Execution Vulnerability | Patch first | 7.8 high | 53.9% | 2022-02-09 |
| CVE-2020-1054 KEV | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker… | Patch first | 7.0 high | 53.9% | 2020-05-21 |
| CVE-2014-0130 KEV | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18,… | Patch first | 7.5 high | 53.7% | 2014-05-07 |
| CVE-2023-41064 KEV | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS… | Patch first | 7.8 high | 53.4% | 2023-09-07 |
| CVE-2021-22175 KEV | When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting… | Patch first | 6.8 medium | 53.4% | 2021-06-11 |
| CVE-2015-1642 KEV | Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memo… | Patch first | 7.8 high | 53.1% | 2015-08-15 |
| CVE-2012-2539 KEV | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote… | Patch first | 7.8 high | 53% | 2012-12-12 |
| CVE-2009-0557 KEV | Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP… | Patch first | 7.8 high | 52.8% | 2009-06-10 |
| CVE-2010-1428 KEV | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 b… | Patch first | 7.5 high | 52.7% | 2010-04-28 |
| CVE-2019-1367 KEV | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engin… | Patch first | 7.5 high | 52.4% | 2019-09-23 |
| CVE-2021-28550 KEV | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use… | Patch first | 8.8 high | 52.1% | 2021-09-02 |
| CVE-2021-20023 KEV | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote h… | Patch first | 4.9 medium | 51.7% | 2021-04-20 |
| CVE-2009-1537 KEV | Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4,… | Patch first | 8.8 high | 51.1% | 2009-05-29 |
| CVE-2015-2502 KEV | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch first | 8.8 high | 51% | 2015-08-19 |
| CVE-2024-38094 KEV | Microsoft SharePoint Remote Code Execution Vulnerability | Patch first | 7.2 high | 50.9% | 2024-07-09 |
| CVE-2025-68645 KEV | A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling o… | Patch first | 8.8 high | 50.6% | 2025-12-22 |
| CVE-2023-49897 KEV | An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vul… | Patch first | 8.8 high | 50.4% | 2023-12-06 |
| CVE-2013-7331 KEV | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC s… | Patch first | 6.5 medium | 50.2% | 2014-02-26 |
| CVE-2021-22017 KEV | Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network acces… | Patch first | 5.3 medium | 49.2% | 2021-09-23 |
| CVE-2021-3493 KEV | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files i… | Patch first | 8.8 high | 49.2% | 2021-04-17 |
| CVE-2023-37580 KEV | Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. | Patch first | 6.1 medium | 49.1% | 2023-07-31 |
| CVE-2023-5217 KEV | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exp… | Patch first | 8.8 high | 49% | 2023-09-28 |
| CVE-2023-28252 KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Patch first | 7.8 high | 48.9% | 2023-04-11 |
| CVE-2015-1671 KEV | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live… | Patch first | 7.8 high | 48.8% | 2015-05-13 |
| CVE-2020-16009 KEV | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a craf… | Patch first | 8.8 high | 48.3% | 2020-11-03 |
| CVE-2016-1646 KEV | The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider eleme… | Patch first | 8.8 high | 48.1% | 2016-03-29 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt