← Back to feed Stats

📈 Trending Vulnerabilities

CVEs whose exploitation probability jumped significantly in the last 24 hours, based on EPSS scores.

150 CVEs trending right now
CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution VulnerabilityCRITICAL9.8100.0%ileMicrosoft2025-07-08
CVE-2025-49704 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.8100.0%ileMicrosoft2025-07-08
CVE-2025-53771 Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.5100.0%ileMicrosoft2025-07-08
CVE-2025-49706 Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.5100.0%ileMicrosoft2025-07-08
CVE-2026-43284 xfrm: esp: avoid in-place decrypt on shared skb fragsHIGH7.899.8%ileMicrosoft2026-05-12
CVE-2026-43500 rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentHIGH7.899.8%ileMicrosoft2026-05-12
CVE-2023-21547 Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityHIGH7.599.8%ileMicrosoft2023-01-10
CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityHIGH7.599.8%ileMicrosoft2023-01-10
CVE-2024-27316 Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesHIGH7.599.8%ileMicrosoft2024-04-09
CVE-2023-45288 HTTP/2 CONTINUATION flood in net/httpHIGH7.599.8%ileMicrosoft2024-04-09
CVE-2024-2961 The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4HIGH7.399.8%ileMicrosoft2024-04-09
CVE-2026-31431 crypto: algif_aead - Revert to operating out-of-placeMEDIUM5.599.8%ileMicrosoft2026-04-14
CVE-2024-27983 An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packetsHIGH8.299.7%ileMicrosoft2024-04-09
CVE-2024-26256 Libarchive Remote Code Execution VulnerabilityHIGH7.899.7%ileMicrosoft2024-04-09
CVE-2024-30044 Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.299.7%ileMicrosoft2024-05-14
CVE-2024-28182 Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usageMEDIUM5.399.7%ileMicrosoft2024-04-09
CVE-2025-49844 Security Advisory 0139UNKNOWN—99.7%ileArista2026-05-18
CVE-2026-41089 Windows Netlogon Remote Code Execution VulnerabilityCRITICAL9.899.6%ileMicrosoft2026-05-12
CVE-2023-50868 MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPUHIGH7.599.6%ileMicrosoft2024-06-11
CVE-2026-50522 Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.899.5%ileMicrosoft2026-07-14
CVE-2025-6965 Integer Truncation on SQLiteCRITICAL9.899.5%ileMicrosoft2025-07-08
CVE-2026-21509 Microsoft Office Security Feature Bypass VulnerabilityHIGH7.899.4%ileMicrosoft2026-01-13
CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-serviceMEDIUM5.599.4%ileMicrosoft2023-01-10
CVE-2026-42897 Microsoft Exchange Server Spoofing VulnerabilityHIGH8.199.3%ileMicrosoft2026-05-12
CVE-2024-30088 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.099.3%ileMicrosoft2024-06-11
CVE-2023-21768 Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.899.2%ileMicrosoft2023-01-10
CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199.1%ileMicrosoft2026-05-12
CVE-2025-29971 Web Threat Defense (WTD.sys) Denial of Service VulnerabilityHIGH7.599.1%ileMicrosoft2025-05-13
CVE-2024-26212 DHCP Server Service Denial of Service VulnerabilityHIGH7.599.1%ileMicrosoft2024-04-09
CVE-2026-32202 Windows Shell Spoofing VulnerabilityMEDIUM4.399.1%ileMicrosoft2026-04-14
CVE-2026-45498 Microsoft Defender Denial of Service VulnerabilityMEDIUM4.099.1%ileMicrosoft2026-05-12
CVE-2022-37436 Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingMEDIUM5.399.0%ileMicrosoft2023-01-10
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityCRITICAL9.898.9%ileMicrosoft2026-04-14
CVE-2023-21742 Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.898.9%ileMicrosoft2023-01-10
CVE-2023-22809 In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmenHIGH7.898.9%ileMicrosoft2023-01-10
CVE-2026-49160 HTTP.sys Denial of Service VulnerabilityHIGH7.598.9%ileMicrosoft2026-06-09
CVE-2024-30043 Microsoft SharePoint Server Information Disclosure VulnerabilityMEDIUM6.598.9%ileMicrosoft2024-05-14
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3MEDIUM5.998.9%ileMicrosoft2024-04-09
CVE-2026-23918 Apache HTTP Server: http2: double free and possible RCE on early resetHIGH8.898.8%ileMicrosoft2026-05-12
CVE-2022-3736 named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queriesHIGH7.598.8%ileMicrosoft2023-01-10
CVE-2024-29988 SmartScreen Prompt Security Feature Bypass VulnerabilityHIGH8.898.7%ileMicrosoft2024-04-09
CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCRITICAL9.898.6%ileMicrosoft2024-06-11
CVE-2022-41903 Integer overflow in `git archive` `git log --format` leading to RCE in gitCRITICAL9.898.6%ileMicrosoft2023-01-10
CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityHIGH8.898.6%ileMicrosoft2023-01-10
CVE-2023-21887 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affecteMEDIUM4.998.6%ileMicrosoft2023-01-10
CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityHIGH—98.6%ileCISA-KEV2026-08-04
CVE-2024-2756 __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixMEDIUM6.598.4%ileMicrosoft2024-04-09
CVE-2022-35977 Integer overflow in certain command arguments can drive Redis to OOM panicMEDIUM5.598.4%ileMicrosoft2023-01-10
CVE-2026-45484 Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH8.898.3%ileMicrosoft2026-06-09
CVE-2024-1874 Command injection via array-ish $command parameter of proc_open()CRITICAL9.498.2%ileMicrosoft2024-04-09
CVE-2024-21907 VulnCheck: CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.JsonUNKNOWN—98.2%ileMicrosoft2025-09-09
CVE-2026-20963 Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.898.0%ileMicrosoft2026-01-13
CVE-2024-32002 GitHub: CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to RemoteCRITICAL9.098.0%ileMicrosoft2024-05-14
CVE-2024-4323 Fluent Bit Memory Corruption VulnerabilityCRITICAL9.897.9%ileMicrosoft2024-05-14
CVE-2023-52755 ksmbd: fix slab out of bounds write in smb_inherit_dacl()HIGH8.497.9%ileMicrosoft2024-05-14
CVE-2026-49975 Apache HTTP Server: mod_http2 denial of serviceHIGH7.597.9%ileMicrosoft2026-06-09
CVE-2025-47981 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityCRITICAL9.897.7%ileMicrosoft2025-07-08
CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.897.7%ileMicrosoft2024-06-11
CVE-2026-20945 Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.697.7%ileMicrosoft2026-04-14
CVE-2024-27322 R Language Vulnerable to Arbitrary Code Execution via Malicious RDS Files (v1.4.0–<4.4.0)HIGH8.897.6%ileMicrosoft2024-04-09
CVE-2024-26230 Windows Telephony Server Elevation of Privilege VulnerabilityHIGH7.897.6%ileMicrosoft2024-04-09
CVE-2025-30394 Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMEDIUM5.997.6%ileMicrosoft2025-05-13
CVE-2026-47291 HTTP.sys Remote Code Execution VulnerabilityCRITICAL9.897.5%ileMicrosoft2026-06-09
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege VulnerabilityMEDIUM5.397.5%ileMicrosoft2026-07-14
CVE-2025-30397 Scripting Engine Memory Corruption VulnerabilityHIGH7.597.4%ileMicrosoft2025-05-13
CVE-2026-32201 Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.597.4%ileMicrosoft2026-04-14
CVE-2024-24576 Rusts's `std::process::Command` did not properly escape arguments of batch files on WindowsCRITICAL10.097.2%ileMicrosoft2024-04-09
CVE-2026-45502 Microsoft Exchange Server Information Disclosure VulnerabilityMEDIUM5.097.2%ileMicrosoft2026-06-09
CVE-2025-54918 Windows NTLM Elevation of Privilege VulnerabilityHIGH8.897.0%ileMicrosoft2025-09-09
CVE-2025-55234 Windows SMB Elevation of Privilege VulnerabilityHIGH8.897.0%ileMicrosoft2025-09-09
CVE-2026-20872 NTLM Hash Disclosure Spoofing VulnerabilityMEDIUM6.597.0%ileMicrosoft2026-01-13
CVE-2024-29990 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCRITICAL9.096.9%ileMicrosoft2024-04-09
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.896.9%ileMicrosoft2026-01-13
CVE-2025-54897 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.896.9%ileMicrosoft2025-09-09
CVE-2026-20925 NTLM Hash Disclosure Spoofing VulnerabilityMEDIUM6.596.8%ileMicrosoft2026-01-13
CVE-2022-3924 named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaHIGH7.596.6%ileMicrosoft2023-01-10
CVE-2026-45657 Windows Kernel Remote Code Execution VulnerabilityCRITICAL9.896.5%ileMicrosoft2026-06-09
CVE-2024-4947 Chromium: CVE-2024-4947 Type Confusion in V8UNKNOWN—96.4%ileMicrosoft2024-05-14
CVE-2024-3833 Chromium: CVE-2024-3833 Object corruption in WebAssemblyUNKNOWN—96.4%ileMicrosoft2024-04-09
CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityMEDIUM5.596.3%ileMicrosoft2024-04-09
CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.896.2%ileMicrosoft2024-06-11
CVE-2025-47984 Windows GDI Information Disclosure VulnerabilityHIGH7.596.2%ileMicrosoft2025-07-08
CVE-2022-3094 An UPDATE message flood may cause named to exhaust all available memoryHIGH7.596.0%ileMicrosoft2023-01-10
CVE-2024-26218 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.895.9%ileMicrosoft2024-04-09
CVE-2024-3156 Chromium: CVE-2024-3156 Inappropriate implementation in V8UNKNOWN—95.9%ileMicrosoft2024-04-09
CVE-2024-26158 Microsoft Install Service Elevation of Privilege VulnerabilityHIGH7.895.8%ileMicrosoft2024-04-09
CVE-2025-40775 DNS message with invalid TSIG causes an assertion failureHIGH7.595.8%ileMicrosoft2025-05-13
CVE-2024-30050 Windows Mark of the Web Security Feature Bypass VulnerabilityMEDIUM5.495.6%ileMicrosoft2024-05-14
CVE-2026-50518 Windows DHCP Server Remote Code Execution VulnerabilityCRITICAL9.895.5%ileMicrosoft2026-07-14
CVE-2026-40372 ASP.NET Core Elevation of Privilege VulnerabilityCRITICAL9.195.5%ileMicrosoft2026-04-14
CVE-2025-37924 ksmbd: fix use-after-free in kerberos authenticationHIGH7.895.5%ileMicrosoft2025-05-13
CVE-2024-4761 Chromium: CVE-2024-4761 Out of bounds write in V8UNKNOWN—95.5%ileMicrosoft2024-05-14
CVE-2026-50656 Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895.4%ileMicrosoft2026-06-09
CVE-2025-29962 Windows Media Remote Code Execution VulnerabilityHIGH8.895.3%ileMicrosoft2025-05-13
CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerabilityHIGH8.195.2%ileMicrosoft2026-05-12
CVE-2025-49719 Microsoft SQL Server Information Disclosure VulnerabilityHIGH7.595.2%ileMicrosoft2025-07-08
CVE-2024-5274 Chromium: CVE-2024-5274 Type Confusion in V8UNKNOWN—95.1%ileMicrosoft2024-05-14
CVE-2026-41091 Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895.0%ileMicrosoft2026-05-12
CVE-2024-30087 Win32k Elevation of Privilege VulnerabilityHIGH7.895.0%ileMicrosoft2024-06-11
CVE-2024-26229 Windows CSC Service Elevation of Privilege VulnerabilityHIGH7.894.9%ileMicrosoft2024-04-09
CVE-2026-45659 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.894.8%ileMicrosoft2026-05-12
CVE-2025-6558 Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPUUNKNOWN—94.8%ileMicrosoft2025-07-08
CVE-2025-7656 Chromium: CVE-2025-7656 Integer overflow in V8UNKNOWN—94.8%ileMicrosoft2025-07-08
CVE-2024-4058 Chromium: CVE-2024-4058 Type Confusion in ANGLEUNKNOWN—94.7%ileMicrosoft2024-04-09
CVE-2026-50508 Windows NTLM Spoofing VulnerabilityMEDIUM6.594.6%ileMicrosoft2026-06-09
CVE-2025-6554 Chromium: CVE-2025-6554 Type Confusion in V8UNKNOWN—94.6%ileMicrosoft2025-07-08
CVE-2024-4671 Chromium: CVE-2024-4671 Use after free in VisualsUNKNOWN—94.4%ileMicrosoft2024-05-14
CVE-2026-20860 Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.894.2%ileMicrosoft2026-01-13
CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege VulnerabilityHIGH7.894.2%ileMicrosoft2024-06-11
CVE-2025-41244 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-202HIGH7.894.1%ileMicrosoft2025-09-09
CVE-2026-42824 M365 Copilot Information Disclosure VulnerabilityMEDIUM6.594.0%ileMicrosoft2026-06-09
CVE-2026-0907 Chromium: CVE-2026-0907 Incorrect security UI in Split ViewUNKNOWN—94.0%ileMicrosoft2026-01-13
CVE-2026-4890 CVE-2026-4890HIGH7.593.7%ileMicrosoft2026-05-12
CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution VulnerabilityHIGH8.893.5%ileMicrosoft2025-07-08
CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescingHIGH7.893.5%ileMicrosoft2026-05-12
CVE-2026-42980 NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.893.5%ileMicrosoft2026-06-09
CVE-2026-20959 Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.693.5%ileMicrosoft2026-01-13
CVE-2024-3566 Command injection vulnerability in programing languages on Microsoft Windows operating system.CRITICAL9.893.4%ileMicrosoft2024-04-09
CVE-2024-30034 Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMEDIUM5.593.4%ileMicrosoft2024-05-14
CVE-2026-33825 Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.893.3%ileMicrosoft2026-04-14
CVE-2022-41953 Git clone remote code execution vulnerability in git-for-windowsHIGH7.893.3%ileMicrosoft2023-01-10
CVE-2025-10891 Chromium: CVE-2025-10891 Integer overflow in V8UNKNOWN—93.2%ileMicrosoft2025-09-09
CVE-2026-0628 Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tagUNKNOWN—93.1%ileMicrosoft2026-01-13
CVE-2022-4379 A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowHIGH7.592.9%ileMicrosoft2023-01-10
CVE-2026-4891 CVE-2026-4891MEDIUM5.392.8%ileMicrosoft2026-05-12
CVE-2026-58644 Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.892.6%ileMicrosoft2026-07-14
CVE-2024-30084 Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.092.5%ileMicrosoft2024-06-11
CVE-2024-30051 Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.892.2%ileMicrosoft2024-05-14
CVE-2024-20685 Azure Private 5G Core Denial of Service VulnerabilityMEDIUM5.992.0%ileMicrosoft2024-04-09
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege VulnerabilityCRITICAL9.191.9%ileMicrosoft2026-05-12
CVE-2025-10585 Chromium: CVE-2025-10585 Type Confusion in V8UNKNOWN—91.9%ileMicrosoft2025-09-09
CVE-2025-4664 Chromium: CVE-2025-4664 Insufficient policy enforcement in LoaderUNKNOWN—91.9%ileMicrosoft2025-05-13
CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege VulnerabilityHIGH7.891.8%ileMicrosoft2026-01-13
CVE-2023-21752 Windows Backup Service Elevation of Privilege VulnerabilityHIGH7.191.8%ileMicrosoft2023-01-10
CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege VulnerabilityMEDIUM5.591.8%ileMicrosoft2024-05-14
CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution VulnerabilityHIGH8.891.6%ileMicrosoft2024-06-11
CVE-2026-50507 Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.891.4%ileMicrosoft2026-06-09
CVE-2026-20805 Desktop Window Manager Information Disclosure VulnerabilityMEDIUM5.591.4%ileMicrosoft2026-01-13
CVE-2026-5281 Chromium: CVE-2026-5281 Use after free in DawnUNKNOWN—91.4%ileMicrosoft2026-04-14
CVE-2024-26234 Proxy Driver Spoofing VulnerabilityMEDIUM6.791.2%ileMicrosoft2024-04-09
CVE-2024-5841 Chromium: CVE-2024-5841 Use after free in V8UNKNOWN—91.2%ileMicrosoft2024-06-11
CVE-2026-40369 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.890.9%ileMicrosoft2026-05-12
CVE-2022-45639 OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a craHIGH7.890.8%ileMicrosoft2023-01-10
CVE-2025-53020 Apache HTTP Server: HTTP/2 DoS by Memory IncreaseHIGH7.590.7%ileMicrosoft2025-07-08
CVE-2024-30032 Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.890.6%ileMicrosoft2024-05-14
CVE-2022-48303 GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jumMEDIUM5.590.6%ileMicrosoft2023-01-10
CVE-2026-40364 Microsoft Word Remote Code Execution VulnerabilityHIGH8.490.4%ileMicrosoft2026-05-12
CVE-2026-20840 Windows NTFS Remote Code Execution VulnerabilityHIGH7.890.4%ileMicrosoft2026-01-13
CVE-2024-30091 Win32k Elevation of Privilege VulnerabilityHIGH7.890.1%ileMicrosoft2024-06-11
CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.890.1%ileMicrosoft2024-05-14

Updated 2026-08-04. EPSS = Exploit Prediction Scoring System (FIRST.org). TRENDING = EPSS jumped ≥5 percentage points since yesterday.