CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,850 CVEs
1,779 on KEV
17,545 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
337,367 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2018-0174 KEV | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remo… | Patch first | 8.6 high | 7.6% | 2018-03-28 |
| CVE-2025-5419 KEV | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a craf… | Patch first | 8.8 high | 7.6% | 2025-06-03 |
| CVE-2026-20805 KEV | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. | Patch first | 5.5 medium | 7.5% | 2026-01-13 |
| CVE-2023-26369 KEV | Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write v… | Patch first | 7.8 high | 7.5% | 2023-09-13 |
| CVE-2021-30554 KEV | Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… | Patch first | 8.8 high | 7.4% | 2021-07-02 |
| CVE-2026-34621 KEV | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('… | Patch first | 8.6 high | 7.3% | 2026-04-11 |
| CVE-2017-6744 KEV | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authent… | Patch first | 8.8 high | 7.3% | 2017-07-17 |
| CVE-2025-24472 KEV | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 throug… | Patch first | 8.1 high | 7.2% | 2025-02-11 |
| CVE-2018-0158 KEV | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… | Patch first | 8.6 high | 7.2% | 2018-03-28 |
| CVE-2022-24521 KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Patch first | 7.8 high | 7.1% | 2022-04-15 |
| CVE-2026-81963 KEV | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 7.1% | 2026-09-08 |
| CVE-2021-1879 KEV | This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. P… | Patch first | 6.1 medium | 7.1% | 2021-04-02 |
| CVE-2017-12234 KEV | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthent… | Patch first | 7.5 high | 7.1% | 2017-09-29 |
| CVE-2017-12237 KEV | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an… | Patch first | 7.5 high | 7.1% | 2017-09-29 |
| CVE-2018-0154 KEV | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticat… | Patch first | 7.5 high | 7.1% | 2018-03-28 |
| CVE-2017-12235 KEV | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an una… | Patch first | 7.5 high | 7.1% | 2017-09-29 |
| CVE-2017-12231 KEV | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated… | Patch first | 7.5 high | 7.1% | 2017-09-29 |
| CVE-2017-12233 KEV | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthent… | Patch first | 7.5 high | 7.1% | 2017-09-29 |
| CVE-2020-6820 KEV | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild ab… | Patch first | 8.1 high | 7.1% | 2020-04-24 |
| CVE-2024-38080 KEV | Windows Hyper-V Elevation of Privilege Vulnerability | Patch first | 7.8 high | 7.1% | 2024-07-09 |
| CVE-2021-30713 KEV | A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass P… | Patch first | 7.8 high | 7% | 2021-09-08 |
| CVE-2021-30952 KEV | An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPa… | Patch first | 7.8 high | 7% | 2021-08-24 |
| CVE-2019-1064 KEV | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfu… | Patch first | 7.8 high | 6.9% | 2019-06-12 |
| CVE-2018-0159 KEV | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could a… | Patch first | 7.5 high | 6.9% | 2018-03-28 |
| CVE-2026-33825 KEV | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 6.9% | 2026-04-14 |
| CVE-2013-1675 KEV | Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initial… | Patch first | 6.5 medium | 6.7% | 2013-05-16 |
| CVE-2023-7024 KEV | Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Patch first | 8.8 high | 6.7% | 2023-12-21 |
| CVE-2019-6693 KEV | Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup fi… | Patch first | 6.5 medium | 6.6% | 2019-11-21 |
| CVE-2021-33739 KEV | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Patch first | 8.4 high | 6.6% | 2021-06-08 |
| CVE-2021-22600 KEV | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or d… | Patch first | 6.6 medium | 6.6% | 2022-01-26 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt