CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,731 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
425,731 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2021-40450 KEV | Win32k Elevation of Privilege Vulnerability | Patch first | 7.8 high | 1.5% | 2021-10-13 |
| CVE-2013-2597 KEV | Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcom… | Patch first | 8.4 high | 1.5% | 2014-08-31 |
| CVE-2024-27834 KEV | The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma… | Patch first | 5.5 medium | 1.5% | 2024-05-14 |
| CVE-2021-36742 KEV | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allo… | Patch first | 7.8 high | 1.5% | 2021-07-29 |
| CVE-2024-23225 KEV | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS… | Patch first | 7.8 high | 1.5% | 2024-03-05 |
| CVE-2023-20963 KEV | In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. U… | Patch first | 7.8 high | 1.5% | 2023-03-24 |
| CVE-2026-72529 KEV | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, a… | Patch first | 9.8 critical | 1.5% | 2026-08-19 |
| CVE-2026-8398 KEV | A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distribu… | Patch first | 9.8 critical | 1.5% | 2026-05-15 |
| CVE-2026-54420 KEV | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web sh… | Patch first | 8.5 high | 1.4% | 2026-06-14 |
| CVE-2019-1214 KEV | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Window… | Patch first | 7.8 high | 1.4% | 2019-09-11 |
| CVE-2025-32701 KEV | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Patch first | 7.8 high | 1.4% | 2025-05-13 |
| CVE-2024-23296 KEV | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS… | Patch first | 7.8 high | 1.4% | 2024-03-05 |
| CVE-2025-21335 KEV | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Patch first | 7.8 high | 1.4% | 2025-01-14 |
| CVE-2025-61624 KEV | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, Fort… | Patch first | 6.0 medium | 1.4% | 2026-04-14 |
| CVE-2023-41990 KEV | The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big… | Patch first | 7.8 high | 1.4% | 2023-09-12 |
| CVE-2026-93952 KEV | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and… | Patch first | 10.0 critical | 1.4% | 2026-09-22 |
| CVE-2020-0069 KEV | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing… | Patch first | 7.8 high | 1.4% | 2020-03-10 |
| CVE-2024-49035 KEV | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. | Patch first | 8.7 high | 1.4% | 2024-11-26 |
| CVE-2025-35939 KEV | Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an… | Patch first | 5.3 medium | 1.4% | 2025-05-07 |
| CVE-2023-4346 KEV | KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users bei… | Patch first | 7.5 high | 1.4% | 2023-08-29 |
| CVE-2025-38352 KEV | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_… | Patch first | 7.8 high | 1.4% | 2025-07-22 |
| CVE-2024-53150 KEV | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current… | Patch first | 7.1 high | 1.4% | 2024-12-24 |
| CVE-2026-21385 KEV | Memory corruption while using alignments for memory allocation. | Patch first | 7.8 high | 1.3% | 2026-03-02 |
| CVE-2026-123039 KEV | The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting proces… | Patch first | 7.8 high | 1.3% | 2026-11-12 |
| CVE-2023-26083 KEV | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all version… | Patch first | 3.3 low | 1.2% | 2023-04-06 |
| CVE-2025-59374 KEV | "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supp… | Patch first | 9.8 critical | 1.2% | 2025-12-17 |
| CVE-2026-119977 KEV | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used dur… | Patch first | 8.1 high | 1.2% | 2026-10-31 |
| CVE-2026-84869 KEV | A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host… | Patch first | 9.9 critical | 1.2% | 2026-09-08 |
| CVE-2023-36851 KEV | A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attac… | Patch first | 5.3 medium | 1.1% | 2023-09-27 |
| CVE-2026-7473 KEV | On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Ge… | Patch first | 5.8 medium | 1.1% | 2026-06-05 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt