Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Every CVE in the CISA Known Exploited Vulnerabilities Catalog, with CVSS, EPSS and the references published for it. CISA lists a CVE only once there is evidence of exploitation against real targets, so this view answers what is being attacked, not what could be.

Quick filters

has:exploit exploit code published (in the search, select to remove) epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: past its KEV remediation deadline exploit code published clear

CVEs in the Known exploited view, sorted by KEV listed
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2024-11680 CVE-2024-11680 ProjectSend 92% 9.8, critical overdue exploit 1 patch 1 advisory 3
CVE-2024-44309 CVE-2024-44309 Apple 23% 6.3, medium overdue exploit 1 advisory 5
CVE-2024-44308 CVE-2024-44308 Apple 10% 8.8, high overdue exploit 1 advisory 5
CVE-2024-9474 CVE-2024-9474 Palo Alto Networks and 1 more vendor 95% 7.2, high ransomware overdue exploit 2 advisory 2
CVE-2024-0012 CVE-2024-0012 Palo Alto Networks 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-9465 CVE-2024-9465 Palo Alto Networks 100% 9.1, critical overdue exploit 1 advisory 1
CVE-2021-26086 CVE-2021-26086 Atlassian 100% 5.3, medium overdue exploit 1 advisory 1
CVE-2024-5910 CVE-2024-5910 Palo Alto Networks and 1 more vendor 92% 9.8, critical overdue exploit 1 advisory 1
CVE-2024-51567 CVE-2024-51567 CyberPersons 87% 9.8, critical ransomware overdue exploit 1 patch 2
CVE-2019-16278 CVE-2019-16278 Nostromo 99% 9.8, critical overdue exploit 3
CVE-2024-8957 CVE-2024-8957 PTZOptics 80% 7.2, high overdue exploit 1 advisory 2
CVE-2024-8956 CVE-2024-8956 PTZOptics 59% 9.1, critical overdue exploit 1 advisory 2
CVE-2024-47575 CVE-2024-47575 Fortinet 95% 9.8, critical overdue exploit 1
CVE-2024-40711 CVE-2024-40711 Veeam 90% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2024-45519 CVE-2024-45519 Synacor 100% 9.8, critical overdue exploit 1 advisory 5
CVE-2023-25280 CVE-2023-25280 D-Link 98% 9.8, critical overdue exploit 1 advisory 1
CVE-2020-15415 CVE-2020-15415 DrayTek 84% 9.8, critical overdue exploit 1 advisory 1
CVE-2024-27348 CVE-2024-27348 Apache and 1 more vendor 99% 9.8, critical overdue exploit 1 advisory 3
CVE-2020-0618 CVE-2020-0618 Microsoft 99% 8.8, high ransomware overdue exploit 2 patch 1
CVE-2014-0502 CVE-2014-0502 Adobe 25% 8.8, high overdue exploit 2 patch 1 advisory 5
CVE-2014-0497 CVE-2014-0497 Adobe 100% 9.8, critical overdue exploit 1 patch 1 advisory 12
CVE-2024-38217 CVE-2024-38217 Microsoft 10% 5.4, medium overdue exploit 1 patch 1
CVE-2024-38014 CVE-2024-38014 Microsoft 6% 7.8, high overdue exploit 1 patch 1
CVE-2016-3714 CVE-2016-3714 ImageMagick and 4 more vendors 97% 8.4, high overdue exploit 3 patch 1 advisory 25
CVE-2021-20124 CVE-2021-20124 DrayTek 96% 7.5, high overdue exploit 1
CVE-2021-20123 CVE-2021-20123 DrayTek 90% 7.5, high overdue exploit 1
CVE-2024-7971 CVE-2024-7971 Google 21% 9.6, critical overdue exploit 1
CVE-2022-0185 CVE-2022-0185 Linux 25% 8.4, high overdue exploit 2 patch 2 advisory 1
CVE-2021-33045 CVE-2021-33045 Dahua 100% 9.8, critical overdue exploit 2 advisory 1
CVE-2021-33044 CVE-2021-33044 Dahua 100% 9.8, critical overdue exploit 2 advisory 1
CVE-2024-23897 CVE-2024-23897 Jenkins and 1 more vendor 100% 9.8, critical ransomware overdue exploit 4 advisory 2
CVE-2024-38193 CVE-2024-38193 Microsoft 29% 7.8, high overdue exploit 1 patch 1
CVE-2018-0824 CVE-2018-0824 Microsoft 73% 8.8, high overdue exploit 1 patch 1 advisory 2
CVE-2012-4792 CVE-2012-4792 Microsoft 79% 8.8, high overdue exploit 1 patch 2 advisory 6
CVE-2024-34102 CVE-2024-34102 Adobe 100% 9.8, critical overdue exploit 1 advisory 2
CVE-2024-36401 CVE-2024-36401 OSGeo 100% 9.8, critical overdue exploit 3 patch 1 advisory 2
CVE-2024-23692 CVE-2024-23692 Rejetto 99% 9.8, critical ransomware overdue exploit 5 advisory 1
CVE-2022-2586 CVE-2022-2586 Linux and 2 more vendors 10% 7.8, high overdue exploit 1 patch 1 advisory 14
CVE-2020-13965 CVE-2020-13965 Roundcube 77% 6.1, medium overdue exploit 1 patch 2 advisory 2
CVE-2024-4577 CVE-2024-4577 PHP Group and 1 more vendor 100% 9.8, critical ransomware overdue exploit 12 patch 1
CVE-2024-1086 CVE-2024-1086 Linux 28% 7.8, high ransomware overdue exploit 4 patch 4
CVE-2024-4978 CVE-2024-4978 Justice AV Solutions and 1 more vendor 27% 8.4, high overdue exploit 1 advisory 1
CVE-2024-5274 CVE-2024-5274 Google 7% 9.6, critical overdue exploit 1
CVE-2020-17519 CVE-2020-17519 Apache and 1 more vendor 98% 7.5, high overdue exploit 1 advisory 6
CVE-2024-4947 CVE-2024-4947 Google 15% 9.6, critical overdue exploit 1 advisory 1
CVE-2023-43208 CVE-2023-43208 NextGen Healthcare 83% 9.8, critical ransomware overdue exploit 2
CVE-2021-40655 CVE-2021-40655 D-Link 87% 7.5, high overdue exploit 1 advisory 1
CVE-2014-100005 CVE-2014-100005 D-Link 43% 8, high overdue exploit 1 patch 1 advisory 1
CVE-2023-7028 CVE-2023-7028 GitLab 95% 9.8, critical overdue exploit 2
CVE-2024-4040 CVE-2024-4040 CrushFTP 100% 10, critical overdue exploit 2 patch 4 advisory 1
CVE-2024-20359 CVE-2024-20359 Cisco 19% 6, medium overdue exploit 1 advisory 1
CVE-2024-20353 CVE-2024-20353 Cisco 71% 8.6, high overdue exploit 1 advisory 1
CVE-2024-3400 CVE-2024-3400 Palo Alto Networks and 1 more vendor 100% 10, critical ransomware overdue exploit 2 advisory 2
CVE-2024-3273 CVE-2024-3273 D-Link and 1 more vendor 100% 9.8, critical overdue exploit 1 advisory 4
CVE-2024-3272 CVE-2024-3272 D-Link and 1 more vendor 98% 9.8, critical overdue exploit 1 advisory 2
CVE-2021-44529 CVE-2021-44529 Ivanti 99% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2019-7256 CVE-2019-7256 Nice 97% 9.8, critical overdue exploit 4 advisory 1
CVE-2024-23296 CVE-2024-23296 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2024-23225 CVE-2024-23225 Apple 1% 7.8, high overdue exploit 8 advisory 17
CVE-2021-36380 CVE-2021-36380 Sunhillo 98% 9.8, critical overdue exploit 1
CVE-2024-21338 CVE-2024-21338 Microsoft 60% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2024-1709 CVE-2024-1709 ConnectWise 100% 10, critical ransomware overdue exploit 3 patch 3
CVE-2023-22527 CVE-2023-22527 Atlassian 100% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2024-23222 CVE-2024-23222 Apple 11% 8.8, high overdue exploit 3 advisory 20
CVE-2023-34048 CVE-2023-34048 VMware 99% 9.8, critical overdue exploit 1 advisory 1
CVE-2018-15133 CVE-2018-15133 Laravel 77% 8.1, high overdue exploit 1 advisory 1
CVE-2024-21887 CVE-2024-21887 Ivanti 100% 9.1, critical ransomware overdue exploit 1 advisory 1
CVE-2023-46805 CVE-2023-46805 Ivanti 100% 8.2, high ransomware overdue exploit 1 advisory 1
CVE-2023-27524 CVE-2023-27524 Apache 97% 9.8, critical overdue exploit 2 advisory 3
CVE-2016-20017 CVE-2016-20017 D-Link 67% 9.8, critical overdue exploit 2 patch 1
CVE-2023-7024 CVE-2023-7024 Google 7% 8.8, high overdue exploit 1 advisory 3
CVE-2023-49897 CVE-2023-49897 FXC 50% 8.8, high overdue exploit 1 advisory 3
CVE-2023-42917 CVE-2023-42917 Apple 9% 8.8, high overdue exploit 7 advisory 9
CVE-2023-42916 CVE-2023-42916 Apple 18% 6.5, medium overdue exploit 7 advisory 9
CVE-2023-4911 CVE-2023-4911 GNU and 1 more vendor 64% 7.8, high overdue exploit 6 patch 1 advisory 19
CVE-2023-1671 CVE-2023-1671 Sophos 100% 9.8, critical overdue exploit 1 advisory 1
CVE-2023-47246 CVE-2023-47246 SysAid 99% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2023-36845 CVE-2023-36845 Juniper 95% 9.8, critical overdue exploit 2 advisory 1
CVE-2023-36844 CVE-2023-36844 Juniper 90% 5.3, medium overdue exploit 1 advisory 1
CVE-2023-29552 CVE-2023-29552 IETF and 3 more vendors 64% 7.5, high overdue exploit 2 advisory 4
CVE-2023-22518 CVE-2023-22518 Atlassian 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2023-46604 CVE-2023-46604 Apache 100% 9.8, critical ransomware overdue exploit 2 advisory 4
CVE-2023-46748 CVE-2023-46748 F5 4% 8.8, high overdue exploit 1 advisory 1
CVE-2023-46747 CVE-2023-46747 F5 97% 9.8, critical ransomware overdue exploit 2 advisory 1
CVE-2023-5631 CVE-2023-5631 Roundcube 76% 5.4, medium overdue exploit 1 patch 3 advisory 7
CVE-2023-4966 CVE-2023-4966 Citrix 100% 7.5, high ransomware overdue exploit 1 advisory 1
CVE-2023-44487 CVE-2023-44487 IETF and 1 more vendor 100% 7.5, high overdue exploit 2 patch 24 advisory 72
CVE-2023-40044 CVE-2023-40044 Progress 90% 8.8, high ransomware overdue exploit 2 advisory 5
CVE-2023-22515 CVE-2023-22515 Atlassian 99% 9.8, critical ransomware overdue exploit 1 advisory 3
CVE-2023-42793 CVE-2023-42793 JetBrains 100% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2023-5217 CVE-2023-5217 Google 49% 8.8, high overdue exploit 3 patch 4 advisory 32
CVE-2018-14667 CVE-2018-14667 Red Hat 74% 9.8, critical overdue exploit 2 advisory 6
CVE-2023-28434 CVE-2023-28434 MinIO 8% 8.8, high overdue exploit 1 patch 1 advisory 1
CVE-2021-3129 CVE-2021-3129 Laravel and 1 more vendor 100% 9.8, critical ransomware overdue exploit 3 patch 1
CVE-2017-6884 CVE-2017-6884 Zyxel 33% 8.8, high ransomware overdue exploit 1
CVE-2014-8361 CVE-2014-8361 Realtek and 2 more vendors 100% 9.8, critical overdue exploit 2 advisory 7
CVE-2023-4863 CVE-2023-4863 Google 100% 8.8, high overdue exploit 5 patch 2 advisory 30
CVE-2023-41061 CVE-2023-41061 Apple 4% 7.8, high overdue exploit 2 advisory 4
CVE-2023-33246 CVE-2023-33246 Apache 97% 9.8, critical overdue exploit 4 advisory 3
CVE-2023-38831 CVE-2023-38831 RARLAB 100% 7.8, high ransomware overdue exploit 4

Showing 201–300 of 814 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.