Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published (in the search, select to remove) epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: exploit code published clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2024-55956 CVE-2024-55956 Cleo 94% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-49138 CVE-2024-49138 Microsoft 26% 7.8, high overdue exploit 2 patch 1
CVE-2024-11680 CVE-2024-11680 ProjectSend 92% 9.8, critical overdue exploit 1 patch 1 advisory 3
CVE-2024-44309 CVE-2024-44309 Apple 23% 6.3, medium overdue exploit 1 advisory 5
CVE-2024-44308 CVE-2024-44308 Apple 10% 8.8, high overdue exploit 1 advisory 5
CVE-2024-9474 CVE-2024-9474 Palo Alto Networks and 1 more vendor 95% 7.2, high ransomware overdue exploit 2 advisory 2
CVE-2024-0012 CVE-2024-0012 Palo Alto Networks 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-11120 CVE-2024-11120 GeoVision 28% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-51567 CVE-2024-51567 CyberPersons 87% 9.8, critical ransomware overdue exploit 1 patch 2
CVE-2024-51378 CVE-2024-51378 CyberPersons 95% 9.8, critical ransomware overdue exploit 2 patch 2
CVE-2024-47575 CVE-2024-47575 Fortinet 95% 9.8, critical overdue exploit 1
CVE-2024-9465 CVE-2024-9465 Palo Alto Networks 100% 9.1, critical overdue exploit 1 advisory 1
CVE-2024-45519 CVE-2024-45519 Synacor 100% 9.8, critical overdue exploit 1 advisory 5
CVE-2024-8957 CVE-2024-8957 PTZOptics 80% 7.2, high overdue exploit 1 advisory 2
CVE-2024-8956 CVE-2024-8956 PTZOptics 59% 9.1, critical overdue exploit 1 advisory 2
CVE-2024-38217 CVE-2024-38217 Microsoft 10% 5.4, medium overdue exploit 1 patch 1
CVE-2024-38014 CVE-2024-38014 Microsoft 6% 7.8, high overdue exploit 1 patch 1
CVE-2024-40711 CVE-2024-40711 Veeam 90% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2024-7971 CVE-2024-7971 Google 21% 9.6, critical overdue exploit 1
CVE-2024-38193 CVE-2024-38193 Microsoft 29% 7.8, high overdue exploit 1 patch 1
CVE-2024-41710 CVE-2024-41710 Mitel 42% 7.2, high overdue exploit 1 advisory 2
CVE-2024-5910 CVE-2024-5910 Palo Alto Networks and 1 more vendor 92% 9.8, critical overdue exploit 1 advisory 1
CVE-2024-36401 CVE-2024-36401 OSGeo 100% 9.8, critical overdue exploit 3 patch 1 advisory 2
CVE-2024-6047 CVE-2024-6047 GeoVision 10% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-34102 CVE-2024-34102 Adobe 100% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-4577 CVE-2024-4577 PHP Group and 1 more vendor 100% 9.8, critical ransomware overdue exploit 12 patch 1
CVE-2024-23692 CVE-2024-23692 Rejetto 99% 9.8, critical ransomware overdue exploit 5 advisory 1
CVE-2024-5274 CVE-2024-5274 Google 7% 9.6, critical overdue exploit 1
CVE-2024-4978 CVE-2024-4978 Justice AV Solutions and 1 more vendor 27% 8.4, high overdue exploit 1 advisory 1
CVE-2024-4947 CVE-2024-4947 Google 15% 9.6, critical overdue exploit 1 advisory 1
CVE-2024-20359 CVE-2024-20359 Cisco 19% 6, medium overdue exploit 1 advisory 1
CVE-2024-20353 CVE-2024-20353 Cisco 71% 8.6, high overdue exploit 1 advisory 1
CVE-2024-4040 CVE-2024-4040 CrushFTP 100% 10, critical overdue exploit 2 patch 4 advisory 1
CVE-2024-27348 CVE-2024-27348 Apache and 1 more vendor 99% 9.8, critical overdue exploit 1 advisory 3
CVE-2024-3400 CVE-2024-3400 Palo Alto Networks and 1 more vendor 100% 10, critical ransomware overdue exploit 2 advisory 2
CVE-2024-3273 CVE-2024-3273 D-Link and 1 more vendor 100% 9.8, critical overdue exploit 1 advisory 4
CVE-2024-3272 CVE-2024-3272 D-Link and 1 more vendor 98% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-23296 CVE-2024-23296 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2024-23225 CVE-2024-23225 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2024-27199 CVE-2024-27199 JetBrains 100% 7.3, high ransomware overdue exploit 1 advisory 1
CVE-2024-1709 CVE-2024-1709 ConnectWise 100% 10, critical ransomware overdue exploit 3 patch 3
CVE-2024-1708 CVE-2024-1708 ConnectWise 95% 8.4, high ransomware overdue exploit 1 advisory 3
CVE-2024-21413 CVE-2024-21413 Microsoft 95% 9.8, critical overdue exploit 1 patch 1
CVE-2024-21338 CVE-2024-21338 Microsoft 60% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2024-1086 CVE-2024-1086 Linux 28% 7.8, high ransomware overdue exploit 4 patch 4
CVE-2024-23897 CVE-2024-23897 Jenkins and 1 more vendor 100% 9.8, critical ransomware overdue exploit 4 advisory 2
CVE-2024-23222 CVE-2024-23222 Apple 11% 8.8, high overdue exploit 3 advisory 20
CVE-2024-0769 CVE-2024-0769 D-Link and 1 more vendor 83% 9.8, critical overdue exploit 1 advisory 2
CVE-2023-22527 CVE-2023-22527 Atlassian 100% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2024-21887 CVE-2024-21887 Ivanti 100% 9.1, critical ransomware overdue exploit 1 advisory 1
CVE-2023-7028 CVE-2023-7028 GitLab 95% 9.8, critical overdue exploit 2
CVE-2023-46805 CVE-2023-46805 Ivanti 100% 8.2, high ransomware overdue exploit 1 advisory 1
CVE-2023-41974 CVE-2023-41974 Apple 2% 7.8, high overdue exploit 1 advisory 4
CVE-2022-2586 CVE-2022-2586 Linux and 2 more vendors 10% 7.8, high overdue exploit 1 patch 1 advisory 14
CVE-2023-7024 CVE-2023-7024 Google 7% 8.8, high overdue exploit 1 advisory 3
CVE-2023-49897 CVE-2023-49897 FXC 50% 8.8, high overdue exploit 1 advisory 3
CVE-2023-42917 CVE-2023-42917 Apple 9% 8.8, high overdue exploit 7 advisory 9
CVE-2023-42916 CVE-2023-42916 Apple 18% 6.5, medium overdue exploit 7 advisory 9
CVE-2023-47246 CVE-2023-47246 SysAid 99% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2023-22518 CVE-2023-22518 Atlassian 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2023-46604 CVE-2023-46604 Apache 100% 9.8, critical ransomware overdue exploit 2 advisory 4
CVE-2023-46748 CVE-2023-46748 F5 4% 8.8, high overdue exploit 1 advisory 1
CVE-2023-46747 CVE-2023-46747 F5 97% 9.8, critical ransomware overdue exploit 2 advisory 1
CVE-2023-43208 CVE-2023-43208 NextGen Healthcare 83% 9.8, critical ransomware overdue exploit 2
CVE-2023-34048 CVE-2023-34048 VMware 99% 9.8, critical overdue exploit 1 advisory 1
CVE-2023-5631 CVE-2023-5631 Roundcube 76% 5.4, medium overdue exploit 1 patch 3 advisory 7
CVE-2023-4966 CVE-2023-4966 Citrix 100% 7.5, high ransomware overdue exploit 1 advisory 1
CVE-2023-44487 CVE-2023-44487 IETF and 1 more vendor 100% 7.5, high overdue exploit 2 patch 24 advisory 72
CVE-2023-22515 CVE-2023-22515 Atlassian 99% 9.8, critical ransomware overdue exploit 1 advisory 3
CVE-2023-4911 CVE-2023-4911 GNU and 1 more vendor 64% 7.8, high overdue exploit 6 patch 1 advisory 19
CVE-2023-5217 CVE-2023-5217 Google 49% 8.8, high overdue exploit 3 patch 4 advisory 32
CVE-2023-40044 CVE-2023-40044 Progress 90% 8.8, high ransomware overdue exploit 2 advisory 5
CVE-2023-42793 CVE-2023-42793 JetBrains 100% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2023-4863 CVE-2023-4863 Google 100% 8.8, high overdue exploit 5 patch 2 advisory 30
CVE-2023-39780 CVE-2023-39780 ASUS 40% 8.8, high overdue exploit 7
CVE-2023-41061 CVE-2023-41061 Apple 4% 7.8, high overdue exploit 2 advisory 4
CVE-2023-38831 CVE-2023-38831 RARLAB 100% 7.8, high ransomware overdue exploit 4
CVE-2023-38035 CVE-2023-38035 Ivanti 100% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2023-36845 CVE-2023-36845 Juniper 95% 9.8, critical overdue exploit 2 advisory 1
CVE-2023-36844 CVE-2023-36844 Juniper 90% 5.3, medium overdue exploit 1 advisory 1
CVE-2023-38950 CVE-2023-38950 ZKTeco 92% 7.5, high overdue exploit 1 advisory 1
CVE-2023-35078 CVE-2023-35078 Ivanti 100% 9.8, critical ransomware overdue exploit 1 advisory 3
CVE-2023-3519 CVE-2023-3519 Citrix 100% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2023-36884 CVE-2023-36884 Microsoft 99% 7.5, high ransomware overdue exploit 1 patch 1
CVE-2023-36874 CVE-2023-36874 Microsoft 43% 7.8, high overdue exploit 1 patch 1
CVE-2023-32046 CVE-2023-32046 Microsoft 10% 7.8, high overdue exploit 1 patch 1
CVE-2023-32434 CVE-2023-32434 Apple 52% 7.8, high overdue exploit 1 advisory 8
CVE-2023-2533 CVE-2023-2533 PaperCut 29% 8.8, high overdue exploit 1 advisory 1
CVE-2023-33538 CVE-2023-33538 TP-Link 42% 8.8, high overdue exploit 2 advisory 1
CVE-2023-20887 CVE-2023-20887 VMware 98% 9.8, critical overdue exploit 1 patch 1
CVE-2023-3079 CVE-2023-3079 Google 38% 8.8, high overdue exploit 3 advisory 7
CVE-2023-34362 CVE-2023-34362 Progress 100% 9.8, critical ransomware overdue exploit 2 advisory 1
CVE-2023-32315 CVE-2023-32315 Ignite Realtime 100% 7.5, high overdue exploit 2
CVE-2023-33246 CVE-2023-33246 Apache 97% 9.8, critical overdue exploit 4 advisory 3
CVE-2023-29336 CVE-2023-29336 Microsoft 41% 7.8, high overdue exploit 1 patch 1
CVE-2023-29552 CVE-2023-29552 IETF and 3 more vendors 64% 7.5, high overdue exploit 2 advisory 4
CVE-2023-28771 CVE-2023-28771 Zyxel 99% 9.8, critical overdue exploit 1 advisory 1
CVE-2023-27524 CVE-2023-27524 Apache 97% 9.8, critical overdue exploit 2 advisory 3
CVE-2023-27350 CVE-2023-27350 PaperCut 100% 9.8, critical ransomware overdue exploit 4 advisory 3
CVE-2023-22894 CVE-2023-22894 Strapi 4% 4.9, medium overdue exploit 2

Showing 201–300 of 883 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.