Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups (in the search, select to remove) is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: ransomware-linked past its KEV remediation deadline clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2018-8120 CVE-2018-8120 Microsoft 73% 7, high ransomware overdue exploit 1 patch 1
CVE-2018-10562 CVE-2018-10562 Dasan 100% 9.8, critical ransomware overdue exploit 2 advisory 1
CVE-2018-1273 CVE-2018-1273 VMware Tanzu 97% 9.8, critical ransomware overdue patch 1 advisory 2
CVE-2018-7600 CVE-2018-7600 Drupal and 1 more vendor 100% 9.8, critical ransomware overdue exploit 4 patch 1
CVE-2018-6882 CVE-2018-6882 Synacor 30% 6.1, medium ransomware overdue exploit 2 advisory 2
CVE-2018-6530 CVE-2018-6530 D-Link 97% 9.8, critical ransomware overdue exploit 1 patch 4
CVE-2018-2380 CVE-2018-2380 SAP 29% 6.6, medium ransomware overdue exploit 2 patch 1
CVE-2018-6789 CVE-2018-6789 Exim and 2 more vendors 82% 9.8, critical ransomware overdue exploit 4 patch 1
CVE-2018-4878 CVE-2018-4878 Adobe and 5 more vendors 90% 7.8, high ransomware overdue exploit 2 advisory 13
CVE-2018-0802 CVE-2018-0802 Microsoft 93% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2017-11882 CVE-2017-11882 Microsoft 100% 7.8, high ransomware overdue exploit 10 patch 1
CVE-2017-10271 CVE-2017-10271 Oracle 100% 7.5, high ransomware overdue exploit 3 patch 1
CVE-2017-1000253 CVE-2017-1000253 Linux and 2 more vendors 11% 7.8, high ransomware overdue patch 1 advisory 12
CVE-2017-12149 CVE-2017-12149 Red Hat 91% 9.8, critical ransomware overdue advisory 4
CVE-2017-12615 CVE-2017-12615 Apache 100% 8.1, high ransomware overdue exploit 3 patch 4
CVE-2017-11357 CVE-2017-11357 Telerik 78% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2015-2291 CVE-2015-2291 Intel and 1 more vendor 9% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2017-9822 CVE-2017-9822 DotNetNuke (DNN) 95% 8.8, high ransomware overdue exploit 1 advisory 2
CVE-2017-7494 CVE-2017-7494 Samba 99% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2017-0213 CVE-2017-0213 Microsoft 84% 7.3, high ransomware overdue exploit 1 patch 1
CVE-2017-0199 CVE-2017-0199 Microsoft 99% 7.8, high ransomware overdue exploit 7 patch 1
CVE-2017-6884 CVE-2017-6884 Zyxel 33% 8.8, high ransomware overdue exploit 1
CVE-2017-0148 CVE-2017-0148 Microsoft 99% 8.1, high ransomware overdue exploit 4 patch 1
CVE-2017-0147 CVE-2017-0147 Microsoft 100% 7.5, high ransomware overdue exploit 5 patch 1
CVE-2017-0146 CVE-2017-0146 Microsoft 90% 8.8, high ransomware overdue exploit 5 patch 1
CVE-2017-0145 CVE-2017-0145 Microsoft 90% 8.8, high ransomware overdue exploit 4 patch 1
CVE-2017-0144 CVE-2017-0144 Microsoft 99% 8.8, high ransomware overdue exploit 6 patch 1
CVE-2017-0143 CVE-2017-0143 Microsoft 93% 8.8, high ransomware overdue exploit 5 patch 1
CVE-2017-0101 CVE-2017-0101 Microsoft 57% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2017-5638 CVE-2017-5638 Apache 100% 9.8, critical ransomware overdue exploit 10 patch 1
CVE-2016-7255 CVE-2016-7255 Microsoft 81% 7.8, high ransomware overdue exploit 5 patch 1
CVE-2016-3351 CVE-2016-3351 Microsoft 26% 6.5, medium ransomware overdue exploit 1 patch 2
CVE-2016-3309 CVE-2016-3309 Microsoft 20% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2016-4117 CVE-2016-4117 Adobe and 3 more vendors 94% 9.8, critical ransomware overdue exploit 1 advisory 10
CVE-2016-0189 CVE-2016-0189 Microsoft 94% 7.5, high ransomware overdue exploit 2 patch 2
CVE-2016-0167 CVE-2016-0167 Microsoft 6% 7.8, high ransomware overdue patch 1 advisory 2
CVE-2016-0151 CVE-2016-0151 Microsoft 63% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2016-1019 CVE-2016-1019 Adobe and 4 more vendors 22% 9.8, critical ransomware overdue patch 1 advisory 13
CVE-2016-0099 CVE-2016-0099 Microsoft 37% 7.8, high ransomware overdue exploit 4 patch 1
CVE-2016-0034 CVE-2016-0034 Microsoft 69% 8.8, high ransomware overdue patch 1 advisory 1
CVE-2015-7645 CVE-2015-7645 Adobe and 6 more vendors 65% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2015-2546 CVE-2015-2546 Microsoft 10% 8.2, high ransomware overdue patch 1 advisory 2
CVE-2015-1701 CVE-2015-1701 Microsoft 56% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2013-3993 CVE-2013-3993 IBM 5% 6.5, medium ransomware overdue advisory 3
CVE-2014-1812 CVE-2014-1812 Microsoft 65% 8.8, high ransomware overdue patch 1 advisory 1
CVE-2013-2465 CVE-2013-2465 Oracle and 2 more vendors 99% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2013-0074 CVE-2013-0074 Microsoft 79% 7.8, high ransomware overdue patch 1 advisory 3
CVE-2013-2551 CVE-2013-2551 Microsoft 74% 8.8, high ransomware overdue patch 1 advisory 3
CVE-2013-0431 CVE-2013-0431 Oracle 90% 3.7, low ransomware overdue exploit 2 advisory 17
CVE-2013-0422 CVE-2013-0422 Oracle and 2 more vendors 97% 9.8, critical ransomware overdue advisory 16
CVE-2012-4681 CVE-2012-4681 Oracle and 1 more vendor 99% 9.8, critical ransomware overdue exploit 2 advisory 10
CVE-2012-1723 CVE-2012-1723 Oracle and 1 more vendor 94% 9.8, critical ransomware overdue advisory 6
CVE-2012-0507 CVE-2012-0507 Oracle and 3 more vendors 98% 9.8, critical ransomware overdue exploit 2 advisory 14
CVE-2012-1710 CVE-2012-1710 Oracle 8% 9.8, critical ransomware overdue patch 1 advisory 2
CVE-2012-0158 CVE-2012-0158 Microsoft 100% 8.8, high ransomware overdue patch 1 advisory 10
CVE-2010-2861 CVE-2010-2861 Adobe 100% 9.8, critical ransomware overdue exploit 1 advisory 3
CVE-2010-1428 CVE-2010-1428 Red Hat 61% 7.5, high ransomware overdue exploit 1 advisory 7
CVE-2010-0738 CVE-2010-0738 Red Hat 75% 5.3, medium ransomware overdue exploit 1 advisory 8
CVE-2010-0188 CVE-2010-0188 Adobe 88% 7.8, high ransomware overdue advisory 9
CVE-2009-3960 CVE-2009-3960 Adobe 90% 6.5, medium ransomware overdue exploit 1 advisory 3
CVE-2008-2992 CVE-2008-2992 Adobe and 1 more vendor 98% 7.8, high ransomware overdue exploit 3 patch 2

Showing 301–361 of 361 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.