Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: vendor apache past its KEV remediation deadline clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2026-34486 CVE-2026-34486 Apache and 1 more vendor 7% 7.5, high overdue advisory 20
CVE-2026-34197 CVE-2026-34197 Apache and 1 more vendor 15% 8.8, high overdue advisory 5
CVE-2025-24813 CVE-2025-24813 Apache 100% 9.8, critical overdue exploit 1 advisory 5
CVE-2024-45195 CVE-2024-45195 Apache and 1 more vendor 100% 7.5, high overdue advisory 5
CVE-2024-38856 CVE-2024-38856 Apache and 1 more vendor 99% 9.8, critical overdue patch 1 advisory 3
CVE-2024-38475 CVE-2024-38475 Apache and 2 more vendors 100% 9.1, critical overdue patch 1 advisory 6
CVE-2024-32113 CVE-2024-32113 Apache and 1 more vendor 100% 9.8, critical overdue patch 1 advisory 3
CVE-2024-27348 CVE-2024-27348 Apache and 1 more vendor 99% 9.8, critical overdue exploit 1 advisory 3
CVE-2023-46604 CVE-2023-46604 Apache 100% 9.8, critical ransomware overdue exploit 2 advisory 4
CVE-2023-33246 CVE-2023-33246 Apache 97% 9.8, critical overdue exploit 4 advisory 3
CVE-2023-27524 CVE-2023-27524 Apache 97% 9.8, critical overdue exploit 2 advisory 3
CVE-2022-33891 CVE-2022-33891 Apache 93% 8.8, high overdue exploit 1 advisory 3
CVE-2022-24706 CVE-2022-24706 Apache 93% 9.8, critical overdue exploit 3 patch 3 advisory 3
CVE-2022-24112 CVE-2022-24112 Apache 96% 9.8, critical overdue exploit 2 advisory 3
CVE-2021-45046 CVE-2021-45046 Apache 100% 9, critical ransomware overdue patch 1 advisory 17
CVE-2021-44228 CVE-2021-44228 Apache 100% 10, critical ransomware overdue exploit 22 patch 3
CVE-2021-42013 CVE-2021-42013 Apache 100% 9.8, critical ransomware overdue exploit 7 patch 3
CVE-2021-41773 CVE-2021-41773 Apache 100% 9.8, critical ransomware overdue exploit 6 patch 4
CVE-2021-40438 CVE-2021-40438 Apache 100% 9, critical ransomware overdue patch 2 advisory 8
CVE-2020-17519 CVE-2020-17519 Apache and 1 more vendor 98% 7.5, high overdue exploit 1 advisory 6
CVE-2020-17530 CVE-2020-17530 Apache 96% 9.8, critical overdue exploit 1 patch 6 advisory 4
CVE-2020-13927 CVE-2020-13927 Apache 100% 9.8, critical overdue exploit 2 advisory 2
CVE-2020-11978 CVE-2020-11978 Apache 99% 8.8, high overdue exploit 2 advisory 2
CVE-2020-1956 CVE-2020-1956 Apache 97% 8.8, high overdue exploit 1 patch 2 advisory 3
CVE-2020-1938 CVE-2020-1938 Apache 99% 9.8, critical overdue exploit 1 patch 6 advisory 15
CVE-2019-17558 CVE-2019-17558 Apache and 1 more vendor 99% 7.5, high overdue exploit 4 advisory 1
CVE-2019-0193 CVE-2019-0193 Apache 84% 7.2, high overdue patch 2 advisory 3
CVE-2019-0211 CVE-2019-0211 Apache 65% 7.8, high overdue exploit 4 patch 5 advisory 22
CVE-2018-11776 CVE-2018-11776 Apache 100% 8.1, high overdue exploit 6 patch 3 advisory 9
CVE-2017-12617 CVE-2017-12617 Apache 100% 8.1, high overdue exploit 2 patch 20 advisory 21
CVE-2017-12615 CVE-2017-12615 Apache 100% 8.1, high ransomware overdue exploit 3 patch 4
CVE-2017-9805 CVE-2017-9805 Apache 99% 8.1, high overdue exploit 1 patch 1 advisory 9
CVE-2017-9791 CVE-2017-9791 Apache 99% 9.8, critical overdue exploit 2 patch 1 advisory 4
CVE-2016-8735 CVE-2016-8735 Apache 90% 9.8, critical overdue patch 23 advisory 13
CVE-2017-5638 CVE-2017-5638 Apache 100% 9.8, critical ransomware overdue exploit 10 patch 1
CVE-2016-4437 CVE-2016-4437 Apache and 1 more vendor 93% 9.8, critical overdue exploit 2 advisory 4
CVE-2016-3088 CVE-2016-3088 Apache 99% 9.8, critical overdue exploit 1 patch 1 advisory 6
CVE-2016-3081 CVE-2016-3081 Apache and 2 more vendors 96% 8.1, high overdue exploit 2 patch 2 advisory 7
CVE-2013-2251 CVE-2013-2251 Apache and 4 more vendors 100% 9.8, critical overdue exploit 3 patch 3 advisory 9
CVE-2012-0391 CVE-2012-0391 Apache 76% 9.8, critical overdue exploit 3 advisory 4
CVE-2006-1547 CVE-2006-1547 Apache 55% 7.5, high overdue exploit 1 advisory 4

Showing 1–41 of 41 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.