CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,935 CVEs
1,779 on KEV
17,545 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-12
197,142 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-43461 KEV | Windows MSHTML Platform Spoofing Vulnerability | Patch first | 8.8 high | 54.2% | 2024-09-10 |
| CVE-2026-85102 KEV | Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to e… | Patch first | 9.8 critical | 54.1% | 2026-09-09 |
| CVE-2021-31196 KEV | Microsoft Exchange Server Remote Code Execution Vulnerability | Patch first | 7.2 high | 54.1% | 2021-07-14 |
| CVE-2020-25079 KEV | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated comman… | Patch first | 8.8 high | 54% | 2020-09-02 |
| CVE-2022-21971 KEV | Windows Runtime Remote Code Execution Vulnerability | Patch first | 7.8 high | 53.9% | 2022-02-09 |
| CVE-2020-1054 KEV | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker… | Patch first | 7.0 high | 53.9% | 2020-05-21 |
| CVE-2014-0130 KEV | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18,… | Patch first | 7.5 high | 53.7% | 2014-05-07 |
| CVE-2021-22941 KEV | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the s… | Patch first | 9.8 critical | 53.6% | 2021-09-23 |
| CVE-2023-45249 KEV | Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-6… | Patch first | 9.8 critical | 53.5% | 2024-07-24 |
| CVE-2023-41064 KEV | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS… | Patch first | 7.8 high | 53.4% | 2023-09-07 |
| CVE-2015-1642 KEV | Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memo… | Patch first | 7.8 high | 53.1% | 2015-08-15 |
| CVE-2012-2539 KEV | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote… | Patch first | 7.8 high | 53% | 2012-12-12 |
| CVE-2009-0557 KEV | Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP… | Patch first | 7.8 high | 52.8% | 2009-06-10 |
| CVE-2010-1428 KEV | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 b… | Patch first | 7.5 high | 52.7% | 2010-04-28 |
| CVE-2019-1367 KEV | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engin… | Patch first | 7.5 high | 52.4% | 2019-09-23 |
| CVE-2021-28550 KEV | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use… | Patch first | 8.8 high | 52.1% | 2021-09-02 |
| CVE-2009-1537 KEV | Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4,… | Patch first | 8.8 high | 51.1% | 2009-05-29 |
| CVE-2015-2502 KEV | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf… | Patch first | 8.8 high | 51% | 2015-08-19 |
| CVE-2024-38094 KEV | Microsoft SharePoint Remote Code Execution Vulnerability | Patch first | 7.2 high | 50.9% | 2024-07-09 |
| CVE-2025-68645 KEV | A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling o… | Patch first | 8.8 high | 50.6% | 2025-12-22 |
| CVE-2023-49897 KEV | An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vul… | Patch first | 8.8 high | 50.4% | 2023-12-06 |
| CVE-2026-102489 KEV | Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also p… | Patch first | 9.8 critical | 49.9% | 2026-09-30 |
| CVE-2021-3493 KEV | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files i… | Patch first | 8.8 high | 49.2% | 2021-04-17 |
| CVE-2011-1889 KEV | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitra… | Patch first | 9.8 critical | 49% | 2011-06-16 |
| CVE-2023-5217 KEV | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exp… | Patch first | 8.8 high | 49% | 2023-09-28 |
| CVE-2023-28252 KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Patch first | 7.8 high | 48.9% | 2023-04-11 |
| CVE-2015-1671 KEV | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live… | Patch first | 7.8 high | 48.8% | 2015-05-13 |
| CVE-2022-23227 KEV | NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because o… | Patch first | 9.8 critical | 48.5% | 2022-01-14 |
| CVE-2020-16009 KEV | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a craf… | Patch first | 8.8 high | 48.3% | 2020-11-03 |
| CVE-2016-1646 KEV | The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider eleme… | Patch first | 8.8 high | 48.1% | 2016-03-29 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt