CVEs: Public PoC, page 6
907 CVEs with public proof-of-concept code on GitHub that meets the quality bar, sorted by threat level then EPSS. Showing 601-720. Use search to combine filters.
Public proof-of-concept code can be fake or malicious. Verify before running, and only in an isolated lab. A PoC means exploit code is public, not that the CVE is exploited in the wild.
HIGH 8.9
Public PoCATT&CK inferred
CVE-2026-64638CVE-2026-64638: WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. …
Unknown · · EPSS 0.89% · Threat 49CRITICAL 9
Public PoCATT&CK inferred
CVE-2026-16723CVE-2026-16723: A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This…
Unknown · · EPSS 0.66% · Threat 49HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-3888CVE-2026-3888: Local privilege escalation in snapd on Linux allows local attackers to get root privilege …
canonical · ubuntu linux · EPSS 0.47% · Threat 49MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-50154CVE-2025-50154: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 29.77% · Threat 48HIGH 7.5
Public PoCATT&CK inferred
CVE-2022-37122CVE-2022-37122: Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2…
carel · pcoweb card firmware · EPSS 23.06% · Threat 48HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-52970CVE-2025-52970: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions …
fortinet · fortiweb · EPSS 10.08% · Threat 48HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-32023CVE-2025-32023: Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.…
redis · redis · EPSS 6.47% · Threat 48HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-14558CVE-2025-14558: The rtsol(8) and rtsold(8) programs do not validate the domain search list options provide…
freebsd · freebsd · EPSS 6.38% · Threat 48HIGH 8.6
Public PoCATT&CK inferred
CVE-2023-40448CVE-2023-40448: The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 1…
apple · ipados · EPSS 2.18% · Threat 48HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-44578CVE-2026-44578: Next.js is a React framework for building full-stack web applications. From 13.4.13 to bef…
vercel · next.js · EPSS 1.90% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-3854CVE-2026-3854: An improper neutralization of special elements vulnerability was identified in GitHub Ente…
github · enterprise server · EPSS 1.50% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-74469CVE-2026-74469: In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer tr…
Unknown · · EPSS 1.47% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-19949CVE-2026-19949: The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection…
Unknown · · EPSS 1.43% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-2005CVE-2026-2005: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitr…
postgresql · postgresql · EPSS 1.37% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-24252CVE-2025-24252: A use-after-free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 1.30% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2025-4660CVE-2025-4660: A remote code execution vulnerability exists in the Windows agent component of SecureConne…
forescout · secureconnector · EPSS 1.18% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2024-54498CVE-2024-54498: A path handling issue was addressed with improved validation. This issue is fixed in macOS…
apple · macos · EPSS 1.13% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8461CVE-2026-8461: An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the M…
Unknown · · EPSS 1.03% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-53359CVE-2026-53359: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow …
linux · linux kernel · EPSS 0.98% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-13780CVE-2025-13780: pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability th…
pgadmin · pgadmin 4 · EPSS 0.94% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-26119CVE-2026-26119: Improper authentication in Windows Admin Center allows an authorized attacker to elevate p…
microsoft · windows admin center · EPSS 0.90% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-65643CVE-2026-65643: Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execu…
cpanel · cpanel · EPSS 0.88% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-45504CVE-2026-45504: Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attac…
microsoft · exchange server · EPSS 0.78% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-47301CVE-2026-47301: Improper access control in Microsoft Configuration Manager allows an authorized attacker t…
microsoft · configuration manager 2503 · EPSS 0.78% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-54121CVE-2026-54121: Improper authorization in Active Directory Certificate Services (AD CS) allows an authoriz…
microsoft · windows 10 1607 · EPSS 0.78% · Threat 48HIGH 8.7
Public PoCATT&CK inferred
CVE-2026-93687CVE-2026-93687: braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers …
Unknown · · EPSS 0.76% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-7482CVE-2026-7482: Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model lo…
ollama · ollama · EPSS 0.71% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2024-37054CVE-2024-37054: Deserialization of untrusted data can occur in versions of the MLflow platform running ver…
lfprojects · mlflow · EPSS 0.70% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-56399CVE-2025-56399: alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achiev…
Unknown · · EPSS 0.60% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-0073CVE-2026-0073: In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual aut…
google · android · EPSS 0.54% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8451CVE-2026-8451: Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory ove…
citrix · netscaler application delivery controller · EPSS 0.50% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-41651CVE-2026-41651: PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a sec…
packagekit project · packagekit · EPSS 0.46% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8389CVE-2026-8389: JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i…
mozilla · firefox · EPSS 0.46% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-6307CVE-2026-6307: Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attac…
google · chrome · EPSS 0.45% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-65817CVE-2025-65817: LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh.
lsc · smart connect indoor ip camera firmware · EPSS 0.34% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-64561CVE-2026-64561: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for i…
Unknown · · EPSS 0.27% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-74580CVE-2026-74580: In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vrin…
Unknown · · EPSS 0.13% · Threat 48HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2023-1545CVE-2023-1545: SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.
teampass · teampass · EPSS 8.35% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-23346CVE-2024-23346: Pymatgen (Python Materials Genomics) is an open-source Python library for materials analys…
materialsvirtuallab · pymatgen · EPSS 3.85% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-47175CVE-2025-47175: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c…
microsoft · 365 apps · EPSS 2.39% · Threat 47HIGH 8.5
Public PoCATT&CK inferred
CVE-2026-3227CVE-2026-3227: A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, a…
tp-link · tl-wr802n firmware · EPSS 1.88% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-21111CVE-2024-21111: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor…
oracle · vm virtualbox · EPSS 1.78% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2025-40778CVE-2025-40778: Under certain circumstances, BIND is too lenient when accepting records from answers, allo…
Unknown · · EPSS 0.67% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-44011CVE-2026-44011: Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, C…
Unknown · · EPSS 0.44% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-107181CVE-2026-107181: Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in …
Unknown · · EPSS 0.34% · Threat 47HIGH 8.5
Public PoCATT&CK inferred
CVE-2026-78306CVE-2026-78306: DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an …
Unknown · · EPSS 0.24% · Threat 47MEDIUM 5.9
Public PoCATT&CK inferred
CVE-2025-26466CVE-2025-26466: A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a p…
openbsd · openssh · EPSS 40.65% · Threat 46MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24071CVE-2025-24071: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 23.33% · Threat 46HIGH 7
Public PoCATT&CK inferred
CVE-2020-17103CVE-2020-17103: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
microsoft · windows 10 · EPSS 22.15% · Threat 46MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-38200CVE-2024-38200: Microsoft Office Spoofing Vulnerability
microsoft · 365 apps · EPSS 20.45% · Threat 46MEDIUM 6.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-5548CVE-2025-5548: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. …
freefloat · freefloat ftp server · EPSS 14.99% · Threat 46HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-20841CVE-2026-20841: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows notepad · EPSS 9.01% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-26980CVE-2026-26980: Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthe…
ghost · ghost · EPSS 5.57% · Threat 46MEDIUM 5.9
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-60137WordPress Core SQL Injection Vulnerability
WordPress · Core · EPSS 5.32% · Threat 46HIGH 8.2
Public PoCATT&CK inferred
CVE-2025-10184CVE-2025-10184: The vulnerability allows any application installed on the device to read SMS/MMS data and …
Unknown · · EPSS 4.32% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-60188CVE-2025-60188: Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atari…
Unknown · · EPSS 3.73% · Threat 46HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-10795CVE-2026-10795: The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authen…
Unknown · · EPSS 3.64% · Threat 46HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-5718CVE-2026-5718: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerab…
Unknown · · EPSS 3.46% · Threat 46HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-39363CVE-2026-39363: Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, an…
vitejs · vite · EPSS 2.62% · Threat 46HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-6018CVE-2025-6018: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within …
suse · pam-config · EPSS 1.10% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-3464CVE-2025-3464: A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a T…
Unknown · · EPSS 0.61% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2026-46529CVE-2026-46529: Atril Document Viewer is the default document reader of the MATE desktop environment for L…
Unknown · · EPSS 0.41% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-56383CVE-2025-56383: Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL fil…
Unknown · · EPSS 0.38% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-31710CVE-2025-31710: In engineermode service, there is a possible command injection due to improper input valid…
google · android · EPSS 0.36% · Threat 46HIGH 8.3
Public PoCATT&CK inferred
CVE-2026-10961CVE-2026-10961: Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a …
google · chrome · EPSS 0.27% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2026-0047CVE-2026-0047: In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to …
google · android · EPSS 0.14% · Threat 46MEDIUM 5.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability
Microsoft · Windows · EPSS 7.46% · Threat 45HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-20817CVE-2026-20817: Improper handling of insufficient permissions or privileges in Windows Error Reporting all…
microsoft · windows 10 21h2 · EPSS 5.42% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2024-10220CVE-2024-10220: The Kubernetes kubelet component allows arbitrary command execution via specially crafted …
Unknown · · EPSS 3.03% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-27771CVE-2026-27771: Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer…
Unknown · · EPSS 1.39% · Threat 45HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-3180CVE-2026-3180: The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for Wo…
Unknown · · EPSS 0.99% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-31857CVE-2026-31857: Craft is a content management system (CMS). Prior to 5.9.9 and 4.17.4, a Remote Code Execu…
craftcms · craft cms · EPSS 0.92% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-31700CVE-2025-31700: A vulnerability has been found in Dahua products. Attackers could exploit a buffer overfl…
Unknown · · EPSS 0.91% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-48842CVE-2026-48842: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL in…
Unknown · · EPSS 0.89% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-62518CVE-2025-62518: astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astr…
Unknown · · EPSS 0.70% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-42588CVE-2026-42588: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulne…
apache · activemq · EPSS 0.66% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-1529CVE-2026-1529: A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the …
Unknown · · EPSS 0.49% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-9830CVE-2026-9830: The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly …
Unknown · · EPSS 0.43% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-23745CVE-2026-23745: node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkp…
isaacs · tar · EPSS 0.38% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-31802CVE-2026-31802: node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tri…
isaacs · tar · EPSS 0.19% · Threat 45HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-32711CVE-2025-32711: Ai command injection in M365 Copilot allows an unauthorized attacker to disclose informati…
microsoft · 365 copilot · EPSS 8.03% · Threat 44HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-9935CVE-2024-9935: The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to P…
Unknown · · EPSS 7.49% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-24294CVE-2026-24294: Improper authentication in Windows SMB Server allows an authorized attacker to elevate pri…
microsoft · windows 10 1607 · EPSS 4.85% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46242CVE-2026-46242: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_rem…
linux · linux kernel · EPSS 4.39% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21420CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
microsoft · windows 10 1507 · EPSS 3.67% · Threat 44HIGH 7.7
Public PoCATT&CK inferred
CVE-2026-25243CVE-2026-25243: Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the R…
redis · redis · EPSS 3.66% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-24291CVE-2026-24291: Incorrect permission assignment for critical resource in Windows Accessibility Infrastruct…
microsoft · windows 10 1607 · EPSS 3.30% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-22241CVE-2026-22241: The Open eClass platform (formerly known as GUnet eClass) is a complete course management …
openeclass · openeclass · EPSS 3.26% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24076CVE-2025-24076: Improper access control in Windows Cross Device Service allows an authorized attacker to e…
microsoft · windows 11 22h2 · EPSS 3.21% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-54100CVE-2025-54100: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows 10 1607 · EPSS 2.23% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2017-7184CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.…
linux · linux kernel · EPSS 1.80% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-35317CVE-2023-35317: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
microsoft · windows server 2012 · EPSS 1.76% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2025-48593CVE-2025-48593: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code executi…
google · android · EPSS 0.87% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2026-62911CVE-2026-62911: Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized …
microsoft · exchange server · EPSS 0.69% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2026-27912CVE-2026-27912: Improper authorization in Windows Kerberos allows an authorized attacker to elevate privil…
microsoft · windows server 2012 · EPSS 0.43% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2025-9974CVE-2025-9974: The unified WEBUI application of the ONT/Beacon device contains an input handling flaw tha…
Unknown · · EPSS 0.42% · Threat 44MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2025-31486CVE-2025-31486: Vite is a frontend tooling framework for javascript. The contents of arbitrary files can b…
Unknown · · EPSS 40.46% · Threat 43HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-49975CVE-2026-49975: Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http…
apache · http server · EPSS 4.17% · Threat 43HIGH 7.6
Public PoCATT&CK inferred
CVE-2024-3661CVE-2024-3661: DHCP can add routes to a client’s routing table via the classless static route option (121…
fortinet · forticlient · EPSS 4.06% · Threat 43HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-8671CVE-2025-8671: A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specificati…
Unknown · · EPSS 3.62% · Threat 43HIGH 7.7
Public PoCATT&CK inferred
CVE-2026-23479CVE-2026-23479: Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the un…
redis · redis · EPSS 1.51% · Threat 43HIGH 7.7
Public PoCATT&CK inferred
CVE-2025-54794CVE-2025-54794: Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw u…
anthropic · claude code · EPSS 1.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-48799CVE-2025-48799: Improper link resolution before file access ('link following') in Windows Update Service a…
microsoft · windows 10 1607 · EPSS 1.26% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-40176CVE-2026-40176: Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.…
getcomposer · composer · EPSS 1.00% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21756CVE-2025-21756: In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the bindi…
linux · linux kernel · EPSS 0.89% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-37899CVE-2025-37899: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-…
linux · linux kernel · EPSS 0.88% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43499CVE-2026-43499: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::…
linux · linux kernel · EPSS 0.79% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-31317CVE-2024-31317: In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execu…
google · android · EPSS 0.78% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-50168CVE-2025-50168: Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP al…
microsoft · windows 11 22h2 · EPSS 0.78% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-14266CVE-2026-14266: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. Thi…
7-zip · 7-zip · EPSS 0.74% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-37947CVE-2025-37947: In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of…
linux · linux kernel · EPSS 0.65% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-32428CVE-2023-32428: This issue was addressed with improved file handling. This issue is fixed in macOS Ventura…
apple · ipados · EPSS 0.63% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21692CVE-2025-21692: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets q…
linux · linux kernel · EPSS 0.62% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46331CVE-2026-46331: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit …
linux · linux kernel · EPSS 0.58% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-23111CVE-2026-23111: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables:…
linux · linux kernel · EPSS 0.52% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64560CVE-2026-64560: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Pre…
Unknown · · EPSS 0.50% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-4275CVE-2025-4275: A vulnerability in the digital signature verification process does not properly validate v…
Unknown · · EPSS 0.48% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64600CVE-2026-64600: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the dat…
linux · linux kernel · EPSS 0.47% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-85884CVE-2026-85884: Missing authentication for critical function in Windows Health and Optimized Experiences S…
Unknown · · EPSS 0.39% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-26128