CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
424,962 CVEs
1,779 on KEV
17,545 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-13
337,500 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-11667 KEV | A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmwar… | Patch first | 7.5 high | 3% | 2024-11-27 |
| CVE-2021-30983 KEV | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to ex… | Patch first | 7.8 high | 2.9% | 2021-08-24 |
| CVE-2023-38606 KEV | This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPad… | Patch first | 5.5 medium | 2.9% | 2023-07-27 |
| CVE-2021-38649 KEV | Open Management Infrastructure Elevation of Privilege Vulnerability | Patch first | 7.0 high | 2.9% | 2021-09-15 |
| CVE-2021-25337 KEV | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write… | Patch first | 4.4 medium | 2.8% | 2021-03-04 |
| CVE-2020-16013 KEV | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a craf… | Patch first | 8.8 high | 2.8% | 2021-01-08 |
| CVE-2025-40602 KEV | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | Patch first | 6.6 medium | 2.8% | 2025-12-18 |
| CVE-2026-7273 KEV | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based… | Patch first | 8.8 high | 2.7% | 2026-06-16 |
| CVE-2021-38645 KEV | Open Management Infrastructure Elevation of Privilege Vulnerability | Patch first | 7.8 high | 2.7% | 2021-09-15 |
| CVE-2025-59230 KEV | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.7% | 2025-10-14 |
| CVE-2024-36971 KEV | In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce p… | Patch first | 7.8 high | 2.7% | 2024-06-10 |
| CVE-2020-0878 KEV | <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in… | Patch first | 4.2 medium | 2.7% | 2020-09-11 |
| CVE-2022-0028 KEV | A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) at… | Patch first | 8.6 high | 2.7% | 2022-08-10 |
| CVE-2026-3910 KEV | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a… | Patch first | 8.8 high | 2.7% | 2026-03-13 |
| CVE-2021-27102 KEV | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. | Patch first | 7.8 high | 2.7% | 2021-02-16 |
| CVE-2024-38226 KEV | Microsoft Publisher Security Feature Bypass Vulnerability | Patch first | 7.3 high | 2.7% | 2024-09-10 |
| CVE-2020-24557 KEV | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particula… | Patch first | 7.8 high | 2.7% | 2020-09-01 |
| CVE-2023-35674 KEV | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local es… | Patch first | 7.8 high | 2.6% | 2023-09-11 |
| CVE-2019-6223 KEV | A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1… | Patch first | 7.5 high | 2.6% | 2019-03-05 |
| CVE-2022-41073 KEV | Windows Print Spooler Elevation of Privilege Vulnerability | Patch first | 7.8 high | 2.6% | 2022-11-09 |
| CVE-2021-31201 KEV | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | Patch first | 5.2 medium | 2.6% | 2021-06-08 |
| CVE-2023-0266 KEV | A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be us… | Patch first | 7.9 high | 2.6% | 2023-01-30 |
| CVE-2026-21519 KEV | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.6% | 2026-02-10 |
| CVE-2022-21919 KEV | Windows User Profile Service Elevation of Privilege Vulnerability | Patch first | 7.0 high | 2.6% | 2022-01-11 |
| CVE-2023-21492 KEV | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | Patch first | 4.4 medium | 2.6% | 2023-05-04 |
| CVE-2020-0638 KEV | An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker wou… | Patch first | 7.8 high | 2.5% | 2020-01-14 |
| CVE-2026-106931 KEV | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYS… | Patch first | 7.8 high | 2.5% | 2026-10-14 |
| CVE-2025-3928 KEV | Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory:… | Patch first | 8.8 high | 2.5% | 2025-04-25 |
| CVE-2025-62221 KEV | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 2.5% | 2025-12-09 |
| CVE-2023-20109 KEV | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authentica… | Patch first | 6.6 medium | 2.5% | 2023-09-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt