Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Every CVE in the CISA Known Exploited Vulnerabilities Catalog, with CVSS, EPSS and the references published for it. CISA lists a CVE only once there is evidence of exploitation against real targets, so this view answers what is being attacked, not what could be.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups (in the search, select to remove) is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors (in the search, select to remove)

Reading your query as: past its KEV remediation deadline ransomware-linked vendor microsoft,adobe,ibm clear

CVEs in the Known exploited view, sorted by KEV listed
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2026-45659 CVE-2026-45659 Microsoft 3% 8.8, high ransomware overdue advisory 1
CVE-2026-33825 CVE-2026-33825 Microsoft 0.4% 7.8, high ransomware overdue advisory 2
CVE-2025-60710 CVE-2025-60710 Microsoft 5% 7.8, high ransomware overdue advisory 3
CVE-2023-21529 CVE-2023-21529 Microsoft 59% 8.8, high ransomware overdue patch 1 advisory 1
CVE-2021-43226 CVE-2021-43226 Microsoft 3% 7.8, high ransomware overdue patch 1
CVE-2025-49706 CVE-2025-49706 Microsoft 99% 6.5, medium ransomware overdue advisory 2
CVE-2025-49704 CVE-2025-49704 Microsoft 100% 8.8, high ransomware overdue advisory 2
CVE-2025-53770 CVE-2025-53770 Microsoft 100% 9.8, critical ransomware overdue exploit 3 patch 2
CVE-2025-29824 CVE-2025-29824 Microsoft 14% 7.8, high ransomware overdue exploit 2 advisory 1
CVE-2025-26633 CVE-2025-26633 Microsoft 30% 7, high ransomware overdue exploit 2 advisory 1
CVE-2018-8639 CVE-2018-8639 Microsoft 22% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2024-49039 CVE-2024-49039 Microsoft 14% 8.8, high ransomware overdue patch 1
CVE-2024-38094 CVE-2024-38094 Microsoft 51% 7.2, high ransomware overdue patch 1
CVE-2024-30088 CVE-2024-30088 Microsoft 68% 7, high ransomware overdue patch 1
CVE-2020-0618 CVE-2020-0618 Microsoft 99% 8.8, high ransomware overdue exploit 2 patch 1
CVE-2024-26169 CVE-2024-26169 Microsoft 4% 7.8, high ransomware overdue patch 1
CVE-2024-30051 CVE-2024-30051 Microsoft 6% 7.8, high ransomware overdue patch 1
CVE-2023-24955 CVE-2023-24955 Microsoft 85% 7.2, high ransomware overdue patch 1
CVE-2024-21338 CVE-2024-21338 Microsoft 60% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2024-21412 CVE-2024-21412 Microsoft 99% 8.1, high ransomware overdue patch 1
CVE-2023-29357 CVE-2023-29357 Microsoft 100% 9.8, critical ransomware overdue patch 1
CVE-2023-38203 CVE-2023-38203 Adobe 97% 9.8, critical ransomware overdue patch 1 advisory 1
CVE-2023-29300 CVE-2023-29300 Adobe 100% 9.8, critical ransomware overdue advisory 2
CVE-2023-36884 CVE-2023-36884 Microsoft 99% 7.5, high ransomware overdue exploit 1 patch 1
CVE-2023-28252 CVE-2023-28252 Microsoft 49% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1388 CVE-2019-1388 Microsoft 9% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2023-24880 CVE-2023-24880 Microsoft 78% 4.4, medium ransomware overdue patch 1
CVE-2022-47986 CVE-2022-47986 IBM 100% 9.8, critical ransomware overdue exploit 1 patch 1
CVE-2023-23376 CVE-2023-23376 Microsoft 11% 7.8, high ransomware overdue patch 1
CVE-2022-41080 CVE-2022-41080 Microsoft 77% 8.8, high ransomware overdue patch 1
CVE-2022-44698 CVE-2022-44698 Microsoft 76% 5.4, medium ransomware overdue patch 1
CVE-2022-41091 CVE-2022-41091 Microsoft 2% 5.4, medium ransomware overdue patch 1
CVE-2022-41073 CVE-2022-41073 Microsoft 2% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2022-41082 CVE-2022-41082 Microsoft 100% 8, high ransomware overdue exploit 1 patch 2
CVE-2022-41040 CVE-2022-41040 Microsoft 100% 8.8, high ransomware overdue exploit 1 patch 3
CVE-2022-37969 CVE-2022-37969 Microsoft 28% 7.8, high ransomware overdue patch 1
CVE-2022-30190 CVE-2022-30190 Microsoft 99% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2016-0034 CVE-2016-0034 Microsoft 69% 8.8, high ransomware overdue patch 1 advisory 1
CVE-2013-3993 CVE-2013-3993 IBM 5% 6.5, medium ransomware overdue advisory 3
CVE-2013-0074 CVE-2013-0074 Microsoft 79% 7.8, high ransomware overdue patch 1 advisory 3
CVE-2017-0147 CVE-2017-0147 Microsoft 100% 7.5, high ransomware overdue exploit 5 patch 1
CVE-2016-3351 CVE-2016-3351 Microsoft 26% 6.5, medium ransomware overdue exploit 1 patch 2
CVE-2020-0638 CVE-2020-0638 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2019-1385 CVE-2019-1385 Microsoft 4% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2019-1130 CVE-2019-1130 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2022-24521 CVE-2022-24521 Microsoft 7% 7.8, high ransomware overdue patch 1
CVE-2021-42287 CVE-2021-42287 Microsoft 77% 7.5, high ransomware overdue patch 2
CVE-2021-42278 CVE-2021-42278 Microsoft 73% 7.5, high ransomware overdue patch 2
CVE-2017-0148 CVE-2017-0148 Microsoft 99% 8.1, high ransomware overdue exploit 4 patch 1
CVE-2021-38646 CVE-2021-38646 Microsoft 8% 7.8, high ransomware overdue patch 2
CVE-2018-8440 CVE-2018-8440 Microsoft 18% 7.8, high ransomware overdue exploit 1 patch 2
CVE-2018-8406 CVE-2018-8406 Microsoft 3% 7.8, high ransomware overdue patch 1 advisory 2
CVE-2018-8405 CVE-2018-8405 Microsoft 3% 7.8, high ransomware overdue patch 1 advisory 2
CVE-2017-0213 CVE-2017-0213 Microsoft 84% 7.3, high ransomware overdue exploit 1 patch 1
CVE-2016-0189 CVE-2016-0189 Microsoft 94% 7.5, high ransomware overdue exploit 2 patch 2
CVE-2016-0151 CVE-2016-0151 Microsoft 63% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2013-2551 CVE-2013-2551 Microsoft 74% 8.8, high ransomware overdue patch 1 advisory 3
CVE-2022-21999 CVE-2022-21999 Microsoft 41% 7.8, high ransomware overdue patch 1
CVE-2017-0146 CVE-2017-0146 Microsoft 90% 8.8, high ransomware overdue exploit 5 patch 1
CVE-2010-2861 CVE-2010-2861 Adobe 100% 9.8, critical ransomware overdue exploit 1 advisory 3
CVE-2019-1405 CVE-2019-1405 Microsoft 30% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1322 CVE-2019-1322 Microsoft 19% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1315 CVE-2019-1315 Microsoft 3% 7.8, high ransomware overdue patch 1
CVE-2019-1253 CVE-2019-1253 Microsoft 12% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1129 CVE-2019-1129 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2019-1069 CVE-2019-1069 Microsoft 6% 7.8, high ransomware overdue exploit 1 patch 2
CVE-2019-1064 CVE-2019-1064 Microsoft 7% 7.8, high ransomware overdue patch 2
CVE-2019-0841 CVE-2019-0841 Microsoft 41% 7.8, high ransomware overdue exploit 6 patch 1
CVE-2019-0543 CVE-2019-0543 Microsoft 5% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2018-8120 CVE-2018-8120 Microsoft 73% 7, high ransomware overdue exploit 1 patch 1
CVE-2017-0101 CVE-2017-0101 Microsoft 57% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2016-3309 CVE-2016-3309 Microsoft 20% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2015-2546 CVE-2015-2546 Microsoft 10% 8.2, high ransomware overdue patch 1 advisory 2
CVE-2009-3960 CVE-2009-3960 Adobe 90% 6.5, medium ransomware overdue exploit 1 advisory 3
CVE-2021-41379 CVE-2021-41379 Microsoft 19% 5.5, medium ransomware overdue patch 2 advisory 1
CVE-2018-8581 CVE-2018-8581 Microsoft 27% 7.4, high ransomware overdue patch 1 advisory 2
CVE-2016-4117 CVE-2016-4117 Adobe and 3 more vendors 94% 9.8, critical ransomware overdue exploit 1 advisory 10
CVE-2016-1019 CVE-2016-1019 Adobe and 4 more vendors 22% 9.8, critical ransomware overdue patch 1 advisory 13
CVE-2016-0099 CVE-2016-0099 Microsoft 37% 7.8, high ransomware overdue exploit 4 patch 1
CVE-2015-7645 CVE-2015-7645 Adobe and 6 more vendors 65% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2015-1701 CVE-2015-1701 Microsoft 56% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2010-0188 CVE-2010-0188 Adobe 88% 7.8, high ransomware overdue advisory 9
CVE-2008-2992 CVE-2008-2992 Adobe and 1 more vendor 98% 7.8, high ransomware overdue exploit 3 patch 2
CVE-2019-0752 CVE-2019-0752 Microsoft 82% 7.5, high ransomware overdue exploit 1 patch 1
CVE-2018-8174 CVE-2018-8174 Microsoft 88% 7.5, high ransomware overdue exploit 2 patch 1
CVE-2018-15982 CVE-2018-15982 Adobe and 5 more vendors 90% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2020-0796 CVE-2020-0796 Microsoft 100% 10, critical ransomware overdue exploit 6 patch 1
CVE-2017-0145 CVE-2017-0145 Microsoft 90% 8.8, high ransomware overdue exploit 4 patch 1
CVE-2017-0144 CVE-2017-0144 Microsoft 99% 8.8, high ransomware overdue exploit 6 patch 1
CVE-2022-21882 CVE-2022-21882 Microsoft 59% 7.8, high ransomware overdue exploit 1 patch 2
CVE-2020-0787 CVE-2020-0787 Microsoft 43% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2018-8453 CVE-2018-8453 Microsoft 70% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2019-1458 CVE-2019-1458 Microsoft 74% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2021-43890 CVE-2021-43890 Microsoft 11% 7.1, high ransomware overdue exploit 1 patch 2
CVE-2021-42321 CVE-2021-42321 Microsoft 92% 8.8, high ransomware overdue exploit 2 patch 2
CVE-2021-40449 CVE-2021-40449 Microsoft 74% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2021-40444 CVE-2021-40444 Microsoft 98% 8.8, high ransomware overdue exploit 3 patch 2
CVE-2021-38647 CVE-2021-38647 Microsoft 100% 9.8, critical ransomware overdue exploit 1 patch 2
CVE-2021-36955 CVE-2021-36955 Microsoft 4% 7.8, high ransomware overdue patch 2
CVE-2021-36942 CVE-2021-36942 Microsoft 66% 7.5, high ransomware overdue exploit 1 patch 2

Showing 1–100 of 130 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.