CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
425,731 CVEs
1,781 on KEV
17,555 EPSS ≥ 10%
25,095 with exploits
synced 2026-11-14
425,750 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2023-33106 KEV | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | Patch first | 8.4 high | 0.8% | 2023-12-05 |
| CVE-2025-21479 KEV | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Patch first | 8.6 high | 0.8% | 2025-06-03 |
| CVE-2024-4610 KEV | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improp… | Patch first | 7.8 high | 0.8% | 2024-06-07 |
| CVE-2026-53362 KEV | In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), w… | Patch first | 7.8 high | 0.7% | 2026-07-04 |
| CVE-2024-43093 KEV | In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive direct… | Patch first | 7.3 high | 0.7% | 2024-11-13 |
| CVE-2019-8526 KEV | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain… | Patch first | 7.8 high | 0.7% | 2019-12-18 |
| CVE-2025-1976 KEV | Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary… | Patch first | 6.7 medium | 0.7% | 2025-04-24 |
| CVE-2026-41709 KEV | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without th… | Patch first | 2.7 low | 0.7% | 2026-07-30 |
| CVE-2021-39793 KEV | In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local… | Patch first | 7.8 high | 0.7% | 2022-03-16 |
| CVE-2024-29748 KEV | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution pri… | Patch first | 7.8 high | 0.7% | 2024-04-05 |
| CVE-2024-43047 KEV | Memory corruption while maintaining memory maps of HLOS memory. | Patch first | 7.8 high | 0.7% | 2024-10-07 |
| CVE-2023-33063 KEV | Memory corruption in DSP Services during a remote call from HLOS to DSP. | Patch first | 7.8 high | 0.7% | 2023-12-05 |
| CVE-2026-66384 KEV | An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | Patch first | 5.3 medium | 0.7% | 2026-08-12 |
| CVE-2025-48543 KEV | In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to lo… | Patch first | 8.8 high | 0.7% | 2025-09-04 |
| CVE-2026-111793 KEV | Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may al… | Patch first | 4.3 medium | 0.6% | 2026-10-16 |
| CVE-2021-25487 KEV | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in ar… | Patch first | 7.3 high | 0.6% | 2021-10-06 |
| CVE-2026-58704 KEV | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of… | Patch first | 8.8 high | 0.6% | 2026-09-15 |
| CVE-2025-48928 KEV | The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a p… | Patch first | 4.0 medium | 0.6% | 2025-05-28 |
| CVE-2026-123218 KEV | IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administr… | Patch first | 9.8 critical | 0.5% | 2026-11-07 |
| CVE-2026-111357 KEV | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation… | Patch first | 7.0 high | 0.5% | 2026-10-15 |
| CVE-2026-19868 KEV | An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method t… | Patch first | 7.5 high | 0.5% | 2026-11-06 |
| CVE-2021-25489 KEV | Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug l… | Patch first | 3.3 low | 0.5% | 2021-10-06 |
| CVE-2021-1906 KEV | Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdra… | Patch first | 6.2 medium | 0.5% | 2021-05-07 |
| CVE-2026-102895 KEV | GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/au… | Patch first | 9.8 critical | 0.5% | 2026-11-04 |
| CVE-2022-48618 KEV | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker… | Patch first | 7.0 high | 0.5% | 2024-01-09 |
| CVE-2024-29745 KEV | there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution pri… | Patch first | 5.5 medium | 0.5% | 2024-04-05 |
| CVE-2025-47729 KEV | The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is differen… | Patch first | 1.9 low | 0.5% | 2025-05-08 |
| CVE-2025-43520 KEV | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1,… | Patch first | 5.5 medium | 0.4% | 2025-12-12 |
| CVE-2025-21480 KEV | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Patch first | 8.6 high | 0.4% | 2025-06-03 |
| CVE-2022-22265 KEV | An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution… | Patch first | 5.0 medium | 0.4% | 2022-01-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt