Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published (in the search, select to remove) epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: past its KEV remediation deadline exploit code published clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2025-31125 CVE-2025-31125 Vite 65% 7.5, high overdue exploit 1 patch 1
CVE-2025-29635 CVE-2025-29635 D-Link 88% 7.2, high overdue exploit 2
CVE-2025-2749 CVE-2025-2749 Kentico 4% 7.2, high overdue exploit 1 patch 1 advisory 1
CVE-2025-2747 CVE-2025-2747 Kentico 97% 9.8, critical overdue exploit 1 patch 1 advisory 2
CVE-2025-2746 CVE-2025-2746 Kentico 74% 9.8, critical overdue exploit 1 patch 1 advisory 2
CVE-2025-30154 CVE-2025-30154 reviewdog 2% 8.6, high overdue exploit 1 patch 2 advisory 2
CVE-2025-30066 CVE-2025-30066 tj-actions 72% 8.6, high overdue exploit 2 patch 2 advisory 9
CVE-2025-27915 CVE-2025-27915 Synacor 4% 5.4, medium overdue exploit 1 advisory 4
CVE-2025-26633 CVE-2025-26633 Microsoft 30% 7, high ransomware overdue exploit 2 advisory 1
CVE-2025-24985 CVE-2025-24985 Microsoft 4% 7.8, high overdue exploit 1 patch 1 advisory 1
CVE-2025-24201 CVE-2025-24201 Apple 4% 10, critical overdue exploit 9 advisory 9
CVE-2025-24054 CVE-2025-24054 Microsoft 62% 5.4, medium overdue exploit 4 advisory 2
CVE-2025-24813 CVE-2025-24813 Apache 100% 9.8, critical overdue exploit 1 advisory 5
CVE-2024-48248 CVE-2024-48248 NAKIVO 94% 8.6, high overdue exploit 1 advisory 1
CVE-2025-24893 CVE-2025-24893 XWiki 100% 9.8, critical overdue exploit 1 patch 1 advisory 1
CVE-2025-0108 CVE-2025-0108 Palo Alto Networks 98% 9.1, critical overdue exploit 3 patch 1 advisory 3
CVE-2025-24200 CVE-2025-24200 Apple 4% 6.1, medium overdue exploit 3 advisory 4
CVE-2025-24016 CVE-2025-24016 Wazuh 94% 9.9, critical overdue exploit 1
CVE-2025-25181 CVE-2025-25181 Advantive 56% 7.5, high overdue exploit 2
CVE-2024-57968 CVE-2024-57968 Advantive 32% 8.8, high overdue exploit 2
CVE-2023-52163 CVE-2023-52163 Digiever 97% 8.8, high overdue exploit 3
CVE-2025-24085 CVE-2025-24085 Apple 18% 10, critical overdue exploit 12 advisory 9
CVE-2025-21333 CVE-2025-21333 Microsoft 10% 7.8, high overdue exploit 1 patch 1 advisory 2
CVE-2024-13161 CVE-2024-13161 Ivanti 90% 7.5, high overdue exploit 1 advisory 1
CVE-2024-13160 CVE-2024-13160 Ivanti 91% 7.5, high overdue exploit 1 advisory 1
CVE-2024-13159 CVE-2024-13159 Ivanti 100% 7.5, high overdue exploit 1 advisory 1
CVE-2025-0282 CVE-2025-0282 Ivanti 100% 9, critical ransomware overdue exploit 3 advisory 2
CVE-2024-50603 CVE-2024-50603 Aviatrix 99% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-12987 CVE-2024-12987 DrayTek 98% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-56145 CVE-2024-56145 Craft CMS 97% 9.8, critical overdue exploit 1 patch 1 advisory 1
CVE-2024-12356 CVE-2024-12356 BeyondTrust 87% 9.8, critical overdue exploit 1 advisory 3
CVE-2024-55956 CVE-2024-55956 Cleo 94% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-49138 CVE-2024-49138 Microsoft 26% 7.8, high overdue exploit 2 patch 1
CVE-2024-11680 CVE-2024-11680 ProjectSend 92% 9.8, critical overdue exploit 1 patch 1 advisory 3
CVE-2024-44309 CVE-2024-44309 Apple 23% 6.3, medium overdue exploit 1 advisory 5
CVE-2024-44308 CVE-2024-44308 Apple 10% 8.8, high overdue exploit 1 advisory 5
CVE-2024-9474 CVE-2024-9474 Palo Alto Networks and 1 more vendor 95% 7.2, high ransomware overdue exploit 2 advisory 2
CVE-2024-0012 CVE-2024-0012 Palo Alto Networks 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-11120 CVE-2024-11120 GeoVision 28% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-51567 CVE-2024-51567 CyberPersons 87% 9.8, critical ransomware overdue exploit 1 patch 2
CVE-2024-51378 CVE-2024-51378 CyberPersons 95% 9.8, critical ransomware overdue exploit 2 patch 2
CVE-2024-47575 CVE-2024-47575 Fortinet 95% 9.8, critical overdue exploit 1
CVE-2024-9465 CVE-2024-9465 Palo Alto Networks 100% 9.1, critical overdue exploit 1 advisory 1
CVE-2024-45519 CVE-2024-45519 Synacor 100% 9.8, critical overdue exploit 1 advisory 5
CVE-2024-8957 CVE-2024-8957 PTZOptics 80% 7.2, high overdue exploit 1 advisory 2
CVE-2024-8956 CVE-2024-8956 PTZOptics 59% 9.1, critical overdue exploit 1 advisory 2
CVE-2024-38217 CVE-2024-38217 Microsoft 10% 5.4, medium overdue exploit 1 patch 1
CVE-2024-38014 CVE-2024-38014 Microsoft 6% 7.8, high overdue exploit 1 patch 1
CVE-2024-40711 CVE-2024-40711 Veeam 90% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2024-7971 CVE-2024-7971 Google 21% 9.6, critical overdue exploit 1
CVE-2024-38193 CVE-2024-38193 Microsoft 29% 7.8, high overdue exploit 1 patch 1
CVE-2024-41710 CVE-2024-41710 Mitel 42% 7.2, high overdue exploit 1 advisory 2
CVE-2024-5910 CVE-2024-5910 Palo Alto Networks and 1 more vendor 92% 9.8, critical overdue exploit 1 advisory 1
CVE-2024-36401 CVE-2024-36401 OSGeo 100% 9.8, critical overdue exploit 3 patch 1 advisory 2
CVE-2024-6047 CVE-2024-6047 GeoVision 10% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-34102 CVE-2024-34102 Adobe 100% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-4577 CVE-2024-4577 PHP Group and 1 more vendor 100% 9.8, critical ransomware overdue exploit 12 patch 1
CVE-2024-23692 CVE-2024-23692 Rejetto 99% 9.8, critical ransomware overdue exploit 5 advisory 1
CVE-2024-5274 CVE-2024-5274 Google 7% 9.6, critical overdue exploit 1
CVE-2024-4978 CVE-2024-4978 Justice AV Solutions and 1 more vendor 27% 8.4, high overdue exploit 1 advisory 1
CVE-2024-4947 CVE-2024-4947 Google 15% 9.6, critical overdue exploit 1 advisory 1
CVE-2024-20359 CVE-2024-20359 Cisco 19% 6, medium overdue exploit 1 advisory 1
CVE-2024-20353 CVE-2024-20353 Cisco 71% 8.6, high overdue exploit 1 advisory 1
CVE-2024-4040 CVE-2024-4040 CrushFTP 100% 10, critical overdue exploit 2 patch 4 advisory 1
CVE-2024-27348 CVE-2024-27348 Apache and 1 more vendor 99% 9.8, critical overdue exploit 1 advisory 3
CVE-2024-3400 CVE-2024-3400 Palo Alto Networks and 1 more vendor 100% 10, critical ransomware overdue exploit 2 advisory 2
CVE-2024-3273 CVE-2024-3273 D-Link and 1 more vendor 100% 9.8, critical overdue exploit 1 advisory 4
CVE-2024-3272 CVE-2024-3272 D-Link and 1 more vendor 98% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-23296 CVE-2024-23296 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2024-23225 CVE-2024-23225 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2024-27199 CVE-2024-27199 JetBrains 100% 7.3, high ransomware overdue exploit 1 advisory 1
CVE-2024-1709 CVE-2024-1709 ConnectWise 100% 10, critical ransomware overdue exploit 3 patch 3
CVE-2024-1708 CVE-2024-1708 ConnectWise 95% 8.4, high ransomware overdue exploit 1 advisory 3
CVE-2024-21413 CVE-2024-21413 Microsoft 95% 9.8, critical overdue exploit 1 patch 1
CVE-2024-21338 CVE-2024-21338 Microsoft 60% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2024-1086 CVE-2024-1086 Linux 28% 7.8, high ransomware overdue exploit 4 patch 4
CVE-2024-23897 CVE-2024-23897 Jenkins and 1 more vendor 100% 9.8, critical ransomware overdue exploit 4 advisory 2
CVE-2024-23222 CVE-2024-23222 Apple 11% 8.8, high overdue exploit 3 advisory 20
CVE-2024-0769 CVE-2024-0769 D-Link and 1 more vendor 83% 9.8, critical overdue exploit 1 advisory 2
CVE-2023-22527 CVE-2023-22527 Atlassian 100% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2024-21887 CVE-2024-21887 Ivanti 100% 9.1, critical ransomware overdue exploit 1 advisory 1
CVE-2023-7028 CVE-2023-7028 GitLab 95% 9.8, critical overdue exploit 2
CVE-2023-46805 CVE-2023-46805 Ivanti 100% 8.2, high ransomware overdue exploit 1 advisory 1
CVE-2023-41974 CVE-2023-41974 Apple 2% 7.8, high overdue exploit 1 advisory 4
CVE-2022-2586 CVE-2022-2586 Linux and 2 more vendors 10% 7.8, high overdue exploit 1 patch 1 advisory 14
CVE-2023-7024 CVE-2023-7024 Google 7% 8.8, high overdue exploit 1 advisory 3
CVE-2023-49897 CVE-2023-49897 FXC 50% 8.8, high overdue exploit 1 advisory 3
CVE-2023-42917 CVE-2023-42917 Apple 9% 8.8, high overdue exploit 7 advisory 9
CVE-2023-42916 CVE-2023-42916 Apple 18% 6.5, medium overdue exploit 7 advisory 9
CVE-2023-47246 CVE-2023-47246 SysAid 99% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2023-22518 CVE-2023-22518 Atlassian 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2023-46604 CVE-2023-46604 Apache 100% 9.8, critical ransomware overdue exploit 2 advisory 4
CVE-2023-46748 CVE-2023-46748 F5 4% 8.8, high overdue exploit 1 advisory 1
CVE-2023-46747 CVE-2023-46747 F5 97% 9.8, critical ransomware overdue exploit 2 advisory 1
CVE-2023-43208 CVE-2023-43208 NextGen Healthcare 83% 9.8, critical ransomware overdue exploit 2
CVE-2023-34048 CVE-2023-34048 VMware 99% 9.8, critical overdue exploit 1 advisory 1
CVE-2023-5631 CVE-2023-5631 Roundcube 76% 5.4, medium overdue exploit 1 patch 3 advisory 7
CVE-2023-4966 CVE-2023-4966 Citrix 100% 7.5, high ransomware overdue exploit 1 advisory 1
CVE-2023-44487 CVE-2023-44487 IETF and 1 more vendor 100% 7.5, high overdue exploit 2 patch 24 advisory 72
CVE-2023-22515 CVE-2023-22515 Atlassian 99% 9.8, critical ransomware overdue exploit 1 advisory 3

Showing 101–200 of 814 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.