← Back to feed TrendingZero-days

🚫 Patch This Week

Vulnerabilities requiring immediate action — actively exploited in the wild or with public exploit code available. Updated every 4 hours.

How this list is built Tier 1 — Patch now: On CISA Known Exploited Vulnerabilities (KEV) list — confirmed in-the-wild exploitation.
Tier 2 — Patch soon: Public proof-of-concept exploit exists with CVSS ≥7.0 or EPSS ≥70th percentile.

⬤ Tier 1 — Patch immediately (5 CVEs) CISA KEV confirmed

CVE / IDTitleSeverityCVSSEPSSWhy urgentSourceDate
CVE-2026-85706GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 1CRITICAL10.096%KEV PoC EPSS 96%ileNVD2026-09-12
CVE-2026-76461A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticCRITICAL9.880%KEV EPSS 80%ileNVD2026-09-14
CVE-2026-76460A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypCRITICAL10.054%KEV EPSS 54%ileNVD2026-09-16
CVE-2026-87886Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin HIGH7.821%KEV EPSS 21%ileNVD2026-09-17
CVE-2026-58704In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (prHIGH8.811%KEV EPSS 11%ileNVD2026-09-15

⬤ Tier 2 — Patch soon (68 CVEs) public exploit code

CVE / IDTitleSeverityCVSSEPSSWhy urgentSourceDate
CVE-2024-4577Argument Injection in PHP-CGICRITICAL9.8100%PoC EPSS 100%ileMicrosoft2024-06-11
CVE-2023-21554Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCRITICAL9.8100%PoC EPSS 100%ileMicrosoft2023-04-11
CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.8100%PoC EPSS 100%ileMicrosoft2026-07-14
CVE-2026-41089Windows Netlogon Remote Code Execution VulnerabilityCRITICAL9.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityCRITICAL9.199%PoC EPSS 99%ileMicrosoft2026-07-14
CVE-2025-50165Windows Graphics Component Remote Code Execution VulnerabilityCRITICAL9.895%PoC EPSS 95%ileMicrosoft2025-08-12
CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb fragsHIGH7.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentHIGH7.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2023-50868MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPUHIGH7.5100%PoC EPSS 100%ileMicrosoft2024-06-11
CVE-2026-45659Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-42897Microsoft Exchange Server Spoofing VulnerabilityHIGH8.199%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityHIGH7.899%PoC EPSS 99%ileMicrosoft2026-01-13
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2024-30088Windows Kernel Elevation of Privilege VulnerabilityHIGH7.099%PoC EPSS 99%ileMicrosoft2024-06-11
CVE-2026-49160HTTP.sys Denial of Service VulnerabilityHIGH7.599%PoC EPSS 99%ileMicrosoft2026-06-09
CVE-2026-23918Apache HTTP Server: http2: double free and possible RCE on early resetHIGH8.899%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.899%PoC EPSS 99%ileMicrosoft2023-04-11
CVE-2023-28231DHCP Server Service Remote Code Execution VulnerabilityHIGH8.898%PoC EPSS 98%ileMicrosoft2023-04-11
CVE-2026-49975Apache HTTP Server: mod_http2 denial of serviceHIGH7.598%PoC EPSS 98%ileMicrosoft2026-06-09
CVE-2026-21510Windows Shell Security Feature Bypass VulnerabilityHIGH8.898%PoC EPSS 98%ileMicrosoft2026-02-10
CVE-2024-35250Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.898%PoC EPSS 98%ileMicrosoft2024-06-11
CVE-2025-53772Web Deploy Remote Code Execution VulnerabilityHIGH8.898%PoC EPSS 98%ileMicrosoft2025-08-12
CVE-2025-55234Windows SMB Elevation of Privilege VulnerabilityHIGH8.897%PoC EPSS 97%ileMicrosoft2025-09-09
CVE-2025-54897Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.897%PoC EPSS 97%ileMicrosoft2025-09-09
CVE-2025-54918Windows NTLM Elevation of Privilege VulnerabilityHIGH8.897%PoC EPSS 97%ileMicrosoft2025-09-09
CVE-2024-30085Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.896%PoC EPSS 96%ileMicrosoft2024-06-11
CVE-2023-28218Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.096%PoC EPSS 96%ileMicrosoft2023-04-11
CVE-2026-20841Windows Notepad App Remote Code Execution VulnerabilityHIGH7.896%PoC EPSS 96%ileMicrosoft2026-02-10
CVE-2026-50656Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.896%PoC EPSS 96%ileMicrosoft2026-06-09
CVE-2026-9256NGINX ngx_http_rewrite_module vulnerabilityHIGH8.196%PoC EPSS 96%ileMicrosoft2026-05-12
CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescingHIGH7.895%PoC EPSS 95%ileMicrosoft2026-05-12
CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-202HIGH7.895%PoC EPSS 95%ileMicrosoft2025-09-09
CVE-2026-41091Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895%PoC EPSS 95%ileMicrosoft2026-05-12
CVE-2025-53786Microsoft Exchange Server Hybrid Deployment Elevation of Privilege VulnerabilityHIGH8.094%PoC EPSS 94%ileMicrosoft2025-08-12
CVE-2026-42980NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.894%PoC EPSS 94%ileMicrosoft2026-06-09
CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityHIGH8.194%PoC EPSS 94%ileMicrosoft2026-06-09
CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.093%PoC EPSS 93%ileMicrosoft2026-08-11
CVE-2026-20817Windows Error Reporting Service Elevation of Privilege VulnerabilityHIGH7.892%PoC EPSS 92%ileMicrosoft2026-01-13
CVE-2026-66804Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityHIGH7.892%PoC EPSS 92%ileMicrosoft2026-08-11
CVE-2026-40369Windows Kernel Elevation of Privilege VulnerabilityHIGH7.891%PoC EPSS 91%ileMicrosoft2026-05-12
CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityHIGH8.191%PoC EPSS 91%ileMicrosoft2026-07-14
CVE-2025-54110Windows Kernel Elevation of Privilege VulnerabilityHIGH8.890%PoC EPSS 90%ileMicrosoft2025-09-09
CVE-2026-55200libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cHIGH8.190%PoC EPSS 90%ileMicrosoft2026-06-09
CVE-2026-21533Windows Remote Desktop Services Elevation of Privilege VulnerabilityHIGH7.890%PoC EPSS 90%ileMicrosoft2026-02-10
CVE-2026-45447Heap Use-After-Free in the PKCS7_verify() FunctionHIGH8.889%PoC EPSS 89%ileMicrosoft2026-06-09
CVE-2026-46242eventpoll: fix ep_remove struct eventpoll / struct file UAFHIGH7.887%PoC EPSS 87%ileMicrosoft2026-05-12
CVE-2023-28244Windows Kerberos Elevation of Privilege VulnerabilityHIGH8.186%PoC EPSS 86%ileMicrosoft2023-04-11
CVE-2026-63520Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.186%PoC EPSS 86%ileMicrosoft2026-08-11
CVE-2026-62737Windows Kernel Elevation of Privilege VulnerabilityHIGH7.886%PoC EPSS 86%ileMicrosoft2026-08-11
CVE-2024-36971net: fix __dst_negative_advice() raceHIGH7.885%PoC EPSS 85%ileMicrosoft2024-06-11
CVE-2026-53359Januscape: KVM/x86 guest-to-host escape (Intel + AMD) — kvmCTF 0-dayHIGH7.060%PoC EPSS 60%ileFeatured2026-07-06
CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityMEDIUM4.099%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2025-50154Microsoft Windows File Explorer Spoofing VulnerabilityMEDIUM6.598%PoC EPSS 98%ileMicrosoft2025-08-12
CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMEDIUM5.398%PoC EPSS 98%ileMicrosoft2026-07-14
CVE-2026-20805Desktop Window Manager Information Disclosure VulnerabilityMEDIUM5.592%PoC EPSS 92%ileMicrosoft2026-01-13
CVE-2026-50507Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.892%PoC EPSS 92%ileMicrosoft2026-06-09
CVE-2015-0204OSSN-0045: = Vulnerable clients allow a TLS protocol downgrade (FREAK)=UNKNOWN—100%PoC EPSS 100%ileOpenStack2026-08-27
CVE-2017-14491OSSN-0082: = Heap and Stack based buffer overflows in dnsmasq prior to version 2.78 =UNKNOWN—100%PoC EPSS 100%ileOpenStack2026-08-27
CVE-2017-11826Microsoft Office Remote Code Execution VulnerabilityUNKNOWN—100%PoC EPSS 100%ileMicrosoft2017-10-10
CVE-2017-11774Microsoft Outlook Security Feature Bypass VulnerabilityUNKNOWN—99%PoC EPSS 99%ileMicrosoft2017-10-10
CVE-2023-2033Chromium: CVE-2023-2033 Type Confusion in V8UNKNOWN—99%PoC EPSS 99%ileMicrosoft2023-04-11
CVE-2024-21907VulnCheck: CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.JsonUNKNOWN—98%PoC EPSS 98%ileMicrosoft2025-09-09
CVE-2026-2441Chromium: CVE-2026-2441 Use after free in CSSUNKNOWN—98%PoC EPSS 98%ileMicrosoft2026-02-10
CVE-2026-0628Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tagUNKNOWN—94%PoC EPSS 94%ileMicrosoft2026-01-13
CVE-2025-10585Chromium: CVE-2025-10585 Type Confusion in V8UNKNOWN—92%PoC EPSS 92%ileMicrosoft2025-09-09
CVE-2026-25243redis-server RESTORE invalid memory access may allow remote code executionUNKNOWN—89%PoC EPSS 89%ileMicrosoft2026-05-12
CVE-2025-9478Chromium: CVE-2025-9478 Use after free in ANGLEUNKNOWN—89%PoC EPSS 89%ileMicrosoft2025-08-12
CVE-2026-23631redis-server Lua use-after-free may allow remote code executionUNKNOWN—86%PoC EPSS 86%ileMicrosoft2026-05-12

Updated 2026-09-18. Source: NVD, CISA KEV, EPSS (FIRST.org). JSON API available for automation.