CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,730 CVEs
1,779 on KEV
17,541 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
158,411 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-0167 KEV | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2… | Patch first | 7.8 high | 5.7% | 2016-04-12 |
| CVE-2023-21823 KEV | Windows Graphics Component Remote Code Execution Vulnerability | Patch first | 7.8 high | 5.6% | 2023-02-14 |
| CVE-2022-32917 KEV | The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7.… | Patch first | 7.8 high | 5.6% | 2022-09-20 |
| CVE-2022-0492 KEV | A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circums… | Patch first | 7.8 high | 5.5% | 2022-03-03 |
| CVE-2019-15271 KEV | A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker… | Patch first | 8.8 high | 5.5% | 2019-11-26 |
| CVE-2021-28664 KEV | The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/wr… | Patch first | 8.8 high | 5.5% | 2021-05-10 |
| CVE-2021-27085 KEV | Internet Explorer Remote Code Execution Vulnerability | Patch first | 8.8 high | 5.4% | 2021-03-11 |
| CVE-2020-17087 KEV | Windows Kernel Local Elevation of Privilege Vulnerability | Patch first | 7.8 high | 5.4% | 2020-11-11 |
| CVE-2015-6175 KEV | The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privi… | Patch first | 7.8 high | 5.3% | 2015-12-09 |
| CVE-2026-25108 KEV | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted… | Patch first | 8.8 high | 5.2% | 2026-02-13 |
| CVE-2021-30900 KEV | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.… | Patch first | 7.8 high | 5.2% | 2021-08-24 |
| CVE-2025-54313 KEV | eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package exe… | Patch first | 7.5 high | 5.1% | 2025-07-19 |
| CVE-2021-36741 KEV | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 al… | Patch first | 8.8 high | 5% | 2021-07-29 |
| CVE-2025-13223 KEV | Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… | Patch first | 8.8 high | 4.9% | 2025-11-17 |
| CVE-2009-1123 KEV | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate ch… | Patch first | 7.8 high | 4.9% | 2009-06-10 |
| CVE-2020-1631 KEV | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirec… | Patch first | 8.8 high | 4.9% | 2020-05-04 |
| CVE-2023-45727 KEV | Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and ea… | Patch first | 7.5 high | 4.8% | 2023-10-18 |
| CVE-2020-1027 KEV | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privileg… | Patch first | 7.8 high | 4.7% | 2020-04-15 |
| CVE-2019-18988 KEV | TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installation… | Patch first | 7.0 high | 4.7% | 2020-02-07 |
| CVE-2025-60710 KEV | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges l… | Patch first | 7.8 high | 4.6% | 2025-11-11 |
| CVE-2018-19320 KEV | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GUR… | Patch first | 7.8 high | 4.6% | 2018-12-21 |
| CVE-2019-7287 KEV | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbit… | Patch first | 7.8 high | 4.6% | 2019-12-18 |
| CVE-2026-20045 KEV | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME)… | Patch first | 8.2 high | 4.5% | 2026-01-21 |
| CVE-2021-31979 KEV | Windows Kernel Elevation of Privilege Vulnerability | Patch first | 7.8 high | 4.5% | 2021-07-14 |
| CVE-2021-30661 KEV | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchO… | Patch first | 8.8 high | 4.5% | 2021-09-08 |
| CVE-2025-48384 KEV | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full acce… | Patch first | 8.0 high | 4.5% | 2025-07-08 |
| CVE-2023-41061 KEV | A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attach… | Patch first | 7.8 high | 4.4% | 2023-09-07 |
| CVE-2026-21533 KEV | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 4.3% | 2026-02-10 |
| CVE-2023-46748 KEV | An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network acces… | Patch first | 8.8 high | 4.3% | 2023-10-26 |
| CVE-2023-41179 KEV | A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Fr… | Patch first | 7.2 high | 4.2% | 2023-09-19 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt