CVEs: Public PoC, page 7
907 CVEs with public proof-of-concept code on GitHub that meets the quality bar, sorted by threat level then EPSS. Showing 721-840. Use search to combine filters.
Public proof-of-concept code can be fake or malicious. Verify before running, and only in an isolated lab. A PoC means exploit code is public, not that the CVE is exploited in the wild.
HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64531CVE-2026-64531: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: rej…
Unknown · · EPSS 0.38% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-68921CVE-2025-68921: SteelSeries Nahimic 3 1.10.7 allows Directory traversal.
steelseries · nahimic · EPSS 0.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-81000CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound recei…
Unknown · · EPSS 0.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-20938CVE-2023-20938: In binder_transaction_buffer_release of binder.c, there is a possible use after free due t…
google · android · EPSS 0.34% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-64512CVE-2025-64512: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extractin…
pdfminer · pdfminer.six · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-40369CVE-2026-40369: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv…
microsoft · windows 11 24h2 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-42980CVE-2026-42980: Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attack…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-62735CVE-2026-62735: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate pr…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-0670CVE-2024-0670: Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.…
checkmk · checkmk · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-49176CVE-2026-49176: Improper privilege management in Windows WalletService allows an authorized attacker to el…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-58635CVE-2026-58635: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows 10 1809 · EPSS 0.32% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-49882CVE-2024-49882: In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brel…
debian · debian linux · EPSS 0.32% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-50343CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker t…
microsoft · windows 10 1809 · EPSS 0.30% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-66804CVE-2026-66804: Improper access control in Windows Cross Device Service allows an authorized attacker to e…
microsoft · windows 10 22h2 · EPSS 0.30% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68121CVE-2026-68121: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header …
Unknown · · EPSS 0.30% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2022-20474CVE-2022-20474: In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the Sy…
google · android · EPSS 0.25% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-50505CVE-2025-50505: Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(cla…
Unknown · · EPSS 0.23% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68138CVE-2026-68138: In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize …
Unknown · · EPSS 0.22% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-28372CVE-2026-28372: telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by …
gnu · inetutils · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-42978CVE-2026-42978: Concurrent execution using shared resource with improper synchronization ('race condition'…
microsoft · windows 10 1809 · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-96889CVE-2026-96889: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusi…
Unknown · · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68398CVE-2026-68398: In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel fr…
Unknown · · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43494CVE-2026-43494: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nen…
linux · linux kernel · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-84568CVE-2026-84568: A path traversal issue was addressed with improved path validation. This issue is fixed in…
apple · macos · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-45250CVE-2026-45250: The setcred(2) system call is only available to privileged users. However, before the pri…
freebsd · freebsd · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-18220CVE-2026-18220: An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/e…
Unknown · · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-31694CVE-2026-31694: In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversize…
linux · linux kernel · EPSS 0.18% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-34740CVE-2024-34740: In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a poss…
google · android · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46215CVE-2026-46215: In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle t…
linux · linux kernel · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-80521CVE-2026-80521: In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_e…
Unknown · · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-57239CVE-2026-57239: The user-controllable executable files will be directly executed by high-privilege process…
foxit · pdf editor · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43724CVE-2026-43724: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.…
apple · ipados · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-3609CVE-2026-3609: Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7…
wellbia · xigncode3 · EPSS 0.16% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43786CVE-2026-43786: This issue was addressed with additional entitlement checks. This issue is fixed in macOS …
apple · macos · EPSS 0.15% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-39875CVE-2026-39875: A permissions issue was addressed with additional restrictions. This issue is fixed in mac…
apple · macos · EPSS 0.15% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-38399CVE-2024-38399: Memory corruption while processing user packets to generate page faults.
qualcomm · wsa8835 firmware · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-29923CVE-2026-29923: The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escal…
Unknown · · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64468CVE-2026-64468: In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in bi…
Unknown · · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-98260CVE-2026-98260: In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX t…
Unknown · · EPSS 0.13% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43783CVE-2026-43783: A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 2…
apple · macos · EPSS 0.13% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-40130CVE-2023-40130: In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to…
google · android · EPSS 0.11% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-52910CVE-2026-52910: In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport c…
linux · linux kernel · EPSS 0.11% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-49881CVE-2026-49881: In serviceClassExists of InCallController.java, there is a possible arbitrary code executi…
google · android · EPSS 0.10% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-0023CVE-2026-0023: In createSessionInternal of PackageInstallerService.java, there is a possible way for an a…
google · android · EPSS 0.08% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-0091CVE-2026-0091: In multiple locations, there is a possible way to execute code in the launcher process due…
google · android · EPSS 0.07% · Threat 43HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-36911CVE-2025-36911: In key-based pairing, there is a possible ID due to a logic error in the code. This could …
google · android · EPSS 8.41% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-5287CVE-2025-5287: The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the …
Unknown · · EPSS 2.38% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-47227CVE-2025-47227: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the A…
Unknown · · EPSS 1.92% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2023-39910CVE-2023-39910: The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 thro…
libbitcoin · libbitcoin explorer · EPSS 1.80% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-2539CVE-2025-2539: The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a m…
file away project · file away · EPSS 1.69% · Threat 42HIGH 7.6
Public PoCATT&CK inferred
CVE-2025-23369CVE-2025-23369: An improper verification of cryptographic signature vulnerability was identified in GitHub…
github · enterprise server · EPSS 1.62% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-23869CVE-2026-23869: A denial of service vulnerability exists in React Server Components, affecting the followi…
Unknown · · EPSS 1.55% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-23870CVE-2026-23870: A denial of service vulnerability could be triggered by sending specially crafted HTTP req…
facebook · react-server-dom-parcel · EPSS 1.53% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-26686CVE-2025-26686: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorize…
microsoft · windows 10 1507 · EPSS 1.40% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-67303CVE-2025-67303: An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially …
comfy · comfyui-manager · EPSS 1.39% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-4138CVE-2025-4138: Allows the extraction filter to be ignored, allowing symlink targets to point outside the …
Unknown · · EPSS 1.39% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-5201CVE-2026-5201: A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability …
gnome · gdk-pixbuf · EPSS 1.22% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-29969CVE-2025-29969: Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an author…
microsoft · windows 10 1507 · EPSS 1.16% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-40815CVE-2024-40815: A race condition was addressed with additional validation. This issue is fixed in iOS 17.6…
apple · ipados · EPSS 1.09% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-58726CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate pri…
microsoft · windows 10 1507 · EPSS 1.01% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-49049CVE-2026-49049: The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated att…
ollyo · helix3 · EPSS 0.99% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-65343CVE-2026-65343: A use after free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 0.69% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-28695CVE-2026-28695: Craft is a content management system (CMS). There is an authenticated admin RCE in Craft C…
craftcms · craft cms · EPSS 0.65% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-31635CVE-2026-31635: In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized …
linux · linux kernel · EPSS 0.63% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-28990CVE-2026-28990: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 …
apple · ipados · EPSS 0.52% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-56426CVE-2024-56426: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990…
samsung · exynos 1080 firmware · EPSS 0.44% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-84543CVE-2026-84543: An out-of-bounds access issue was addressed with improved bounds checking. This issue is f…
apple · macos · EPSS 0.43% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-0828CVE-2026-0828: Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.7…
Unknown · · EPSS 0.41% · Threat 42MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2023-24932CVE-2023-24932: Secure Boot Security Feature Bypass Vulnerability
microsoft · windows 10 1507 · EPSS 10.56% · Threat 41HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-24118CVE-2025-24118: The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.…
apple · ipados · EPSS 3.75% · Threat 41MEDIUM 4.9
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi · Strapi · EPSS 3.61% · Threat 41HIGH 7.2
Public PoCATT&CK inferred
CVE-2025-53779CVE-2025-53779: Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privi…
microsoft · windows server 2025 · EPSS 2.70% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-31133CVE-2025-31133: runc is a CLI tool for spawning and running containers according to the OCI specification.…
linuxfoundation · runc · EPSS 0.84% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-49144CVE-2025-49144: Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a pri…
Unknown · · EPSS 0.66% · Threat 41HIGH 7.4
Public PoCATT&CK inferred
CVE-2025-59489CVE-2025-59489: Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument inje…
unity · editor · EPSS 0.64% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-52881CVE-2025-52881: runc is a CLI tool for spawning and running containers according to the OCI specification.…
linuxfoundation · runc · EPSS 0.57% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-26125CVE-2025-26125: An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows atta…
Unknown · · EPSS 0.52% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-39459CVE-2025-39459: Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 all…
Unknown · · EPSS 0.40% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-8061CVE-2025-8061: A potential insufficient access control vulnerability was reported in the Lenovo Dispatche…
Unknown · · EPSS 0.39% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-27237CVE-2025-27237: In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a pa…
Unknown · · EPSS 0.33% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-22441CVE-2025-22441: In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a pos…
google · android · EPSS 0.12% · Threat 41MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2024-50629CVE-2024-50629: Improper encoding or escaping of output vulnerability in the webapi component in Synology …
synology · beestation os · EPSS 31.71% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2024-7014CVE-2024-7014: EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for …
telegram · telegram · EPSS 1.38% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-46333CVE-2026-46333: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly sane…
linux · linux kernel · EPSS 0.97% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-33725CVE-2026-33725: Metabase is an open source business intelligence and embedded analytics tool. In Metabase …
metabase · metabase · EPSS 0.87% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2024-44258CVE-2024-44258: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17…
apple · ipados · EPSS 0.75% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-26026CVE-2026-26026: GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, tem…
glpi-project · glpi · EPSS 0.54% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-38751CVE-2026-38751: OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in…
devcode · openstamanager · EPSS 0.53% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-17106CVE-2026-17106: The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompress…
Unknown · · EPSS 0.44% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-46243CVE-2026-46243: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject u…
linux · linux kernel · EPSS 0.38% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-93485CVE-2026-93485: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne…
Unknown · · EPSS 0.35% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-20687CVE-2026-20687: A use after free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 0.35% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-65018CVE-2025-65018: LIBPNG is a reference library for use in applications that read, create, and manipulate PN…
libpng · libpng · EPSS 0.26% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-53361CVE-2026-53361: In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_pr…
linux · linux kernel · EPSS 0.18% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-102282CVE-2026-102282: adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior…
Unknown · · EPSS 0.15% · Threat 40MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2020-10136CVE-2020-10136: IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that dec…
cisco · nx-os · EPSS 28.54% · Threat 39MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2026-21852CVE-2026-21852: Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Co…
anthropic · claude code · EPSS 27.50% · Threat 39MEDIUM 5.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-21876CVE-2026-21876: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with comp…
owasp · owasp modsecurity core rule set · EPSS 17.88% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2026-29059CVE-2026-29059: Windmill is an open-source developer platform for internal code: APIs, background jobs, wo…
windmill · windmill · EPSS 2.17% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2025-0401CVE-2025-0401: A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected i…
1902756969 · reggie · EPSS 1.30% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2023-32413CVE-2023-32413: A race condition was addressed with improved state handling. This issue is fixed in watchO…
apple · ipados · EPSS 0.54% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2024-43535CVE-2024-43535: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
microsoft · windows 10 1507 · EPSS 0.53% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2025-6019CVE-2025-6019: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the …
Unknown · · EPSS 0.48% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-21508CVE-2026-21508: Improper authentication in Windows Storage allows an authorized attacker to elevate privil…
microsoft · windows 10 1607 · EPSS 0.45% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-50656CVE-2026-50656: Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine…
microsoft · malware protection engine · EPSS 0.37% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-20980CVE-2026-20980: Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker…
samsung · android · EPSS 0.26% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2026-0827CVE-2026-0827: During an internal security assessment, a potential vulnerability was discovered in Lenovo…
lenovo · diagnostics · EPSS 0.21% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-83834CVE-2026-83834: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate pri…
Unknown · · EPSS 0.21% · Threat 39MEDIUM 4.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windows · EPSS 4.90% · Threat 38MEDIUM 5.3
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-28397CVE-2024-28397: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers t…
Unknown · · EPSS 4.55% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-27840CVE-2025-27840: Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
espressif · esp32 firmware · EPSS 1.36% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-48804CVE-2025-48804: Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an u…
microsoft · windows 10 1507 · EPSS 0.65% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-32223CVE-2026-32223: Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to …
microsoft · windows 11 24h2 · EPSS 0.56% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-45585CVE-2026-45585: Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred…
microsoft · windows 11 24h2 · EPSS 0.49% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-31702CVE-2025-31702: A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker …
Unknown · · EPSS 0.46% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2024-5909CVE-2024-5909: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Window…
paloaltonetworks · cortex xdr agent · EPSS 0.41% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-27591CVE-2025-27591: A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to t…
facebook · below · EPSS 0.37% · Threat 38MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2023-20564CVE-2023-20564: Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryz…
amd · ryzen master · EPSS 0.30% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-40003