← Back to feed Stats

📈 Trending Vulnerabilities

CVEs whose exploitation probability jumped significantly in the last 24 hours, based on EPSS scores.

109 CVEs trending right now
CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2024-4577 Argument Injection in PHP-CGICRITICAL9.8100.0%ileMicrosoft2024-06-11
CVE-2026-109618 PHP Memory Corruption VulnerabilityHIGH—100.0%ileCISA-KEV2026-10-26
CVE-2026-109619 PHP Stale Internal Request-State VulnerabilityHIGH—100.0%ileCISA-KEV2026-10-26
CVE-2025-32433 Erlang/OTP SSH Vulnerable to Pre-Authentication RCECRITICAL10.099.9%ileMicrosoft2025-04-08
CVE-2026-21589 Atlassian Data Center products: unauthenticated access to files in the web rootHIGH—99.9%ileFeatured2026-10-15
CVE-2026-43284 xfrm: esp: avoid in-place decrypt on shared skb fragsHIGH7.899.8%ileMicrosoft2026-05-12
CVE-2026-43500 rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentHIGH7.899.8%ileMicrosoft2026-05-12
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoderHIGH8.199.7%ileMicrosoft2026-10-13
CVE-2026-104935 Ivanti Connect Secure authentication bypass — exploited zero-day chained to root RCEHIGH—99.7%ileFeatured2026-10-13
CVE-2026-88771 Citrix NetScaler: two more exploited flaws (CVE-2026-88771 + CVE-2026-88772)HIGH—99.7%ileFeatured2026-09-27
CVE-2026-41089 Windows Netlogon Remote Code Execution VulnerabilityCRITICAL9.899.6%ileMicrosoft2026-05-12
CVE-2026-45659 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.899.6%ileMicrosoft2026-05-12
CVE-2023-50868 MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPUHIGH7.599.5%ileMicrosoft2024-06-11
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass VulnerabilityCRITICAL9.199.4%ileMicrosoft2026-07-14
CVE-2026-42897 Microsoft Exchange Server Spoofing VulnerabilityHIGH8.199.4%ileMicrosoft2026-05-12
CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199.3%ileMicrosoft2026-05-12
CVE-2025-29971 Web Threat Defense (WTD.sys) Denial of Service VulnerabilityHIGH7.599.3%ileMicrosoft2025-05-13
CVE-2024-30088 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.099.3%ileMicrosoft2024-06-11
CVE-2025-22037 ksmbd: fix null pointer dereference in alloc_preauth_hash()MEDIUM5.599.3%ileMicrosoft2025-04-08
CVE-2026-45498 Microsoft Defender Denial of Service VulnerabilityMEDIUM4.099.2%ileMicrosoft2026-05-12
CVE-2026-49160 HTTP.sys Denial of Service VulnerabilityHIGH7.599.1%ileMicrosoft2026-06-09
CVE-2025-14174 Chromium: CVE-2025-14174 Out of bounds memory access in ANGLEUNKNOWN—99.0%ileMicrosoft2025-12-09
CVE-2025-53778 Windows NTLM Elevation of Privilege VulnerabilityHIGH8.898.9%ileMicrosoft2025-08-12
CVE-2026-23918 Apache HTTP Server: http2: double free and possible RCE on early resetHIGH8.898.9%ileMicrosoft2026-05-12
CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityHIGH—98.8%ileCISA-KEV2026-10-27
CVE-2025-68615 Net-SNMP snmptrapd crashCRITICAL9.898.7%ileMicrosoft2025-12-09
CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCRITICAL9.898.7%ileMicrosoft2024-06-11
CVE-2026-45484 Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH8.898.4%ileMicrosoft2026-06-09
CVE-2026-49975 Apache HTTP Server: mod_http2 denial of serviceHIGH7.598.4%ileMicrosoft2026-06-09
CVE-2025-30394 Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMEDIUM5.998.4%ileMicrosoft2025-05-13
CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.898.3%ileMicrosoft2026-05-12
CVE-2025-50154 Microsoft Windows File Explorer Spoofing VulnerabilityMEDIUM6.598.3%ileMicrosoft2025-08-12
CVE-2026-97229 Integer Overflow or Wraparound in GitLabCRITICAL10.098.1%ileMicrosoft2026-10-13
CVE-2025-53772 Web Deploy Remote Code Execution VulnerabilityHIGH8.898.1%ileMicrosoft2025-08-12
CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)HIGH8.898.1%ileMicrosoft2024-06-11
CVE-2025-30397 Scripting Engine Memory Corruption VulnerabilityHIGH7.598.1%ileMicrosoft2025-05-13
CVE-2026-47291 HTTP.sys Remote Code Execution VulnerabilityCRITICAL9.897.9%ileMicrosoft2026-06-09
CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.897.9%ileMicrosoft2024-06-11
CVE-2025-37924 ksmbd: fix use-after-free in kerberos authenticationMEDIUM5.597.9%ileMicrosoft2025-05-13
CVE-2025-53722 Windows Remote Desktop Services Denial of Service VulnerabilityHIGH7.597.8%ileMicrosoft2025-08-12
CVE-2025-29793 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH7.297.8%ileMicrosoft2025-04-08
CVE-2025-49712 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.897.6%ileMicrosoft2025-08-12
CVE-2026-45502 Microsoft Exchange Server Information Disclosure VulnerabilityMEDIUM5.097.5%ileMicrosoft2026-06-09
CVE-2025-53760 Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH7.197.4%ileMicrosoft2025-08-12
CVE-2026-102764 BeyondTrust Remote Support: unvalidated internal messages allow file operations on the applianceCRITICAL9.397.3%ileFeatured2026-10-15
CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.897.3%ileMicrosoft2025-04-08
CVE-2026-58644 Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.896.9%ileMicrosoft2026-07-14
CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescingHIGH7.896.9%ileMicrosoft2026-05-12
CVE-2026-45657 Windows Kernel Remote Code Execution VulnerabilityCRITICAL9.896.8%ileMicrosoft2026-06-09
CVE-2025-29962 Windows Media Remote Code Execution VulnerabilityHIGH8.896.8%ileMicrosoft2025-05-13
CVE-2025-40775 DNS message with invalid TSIG causes an assertion failureHIGH7.596.8%ileMicrosoft2025-05-13
CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.896.6%ileMicrosoft2024-06-11
CVE-2025-38562 ksmbd: fix null pointer dereference error in generate_encryptionkeyMEDIUM5.596.3%ileMicrosoft2025-08-12
CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution VulnerabilityHIGH8.196.2%ileMicrosoft2025-04-08
CVE-2024-5458 Filter bypass in filter_var (FILTER_VALIDATE_URL)MEDIUM5.396.2%ileMicrosoft2024-06-11
CVE-2026-50508 Windows NTLM Spoofing VulnerabilityMEDIUM6.596.1%ileMicrosoft2026-06-09
CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerabilityHIGH8.195.9%ileMicrosoft2026-05-12
CVE-2025-26670 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution VulnerabilityHIGH8.195.9%ileMicrosoft2025-04-08
CVE-2026-50656 Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895.9%ileMicrosoft2026-06-09
CVE-2025-50165 Windows Graphics Component Remote Code Execution VulnerabilityCRITICAL9.895.8%ileMicrosoft2025-08-12
CVE-2026-96951 Windows Shell Security Feature Bypass VulnerabilityHIGH8.895.6%ileMicrosoft2026-10-13
CVE-2026-8510 Chromium: CVE-2026-8510 Integer overflow in SkiaUNKNOWN—95.6%ileMicrosoft2026-05-12
CVE-2026-8711 NGINX JavaScript vulnerabilityHIGH8.195.5%ileMicrosoft2026-05-12
CVE-2024-30087 Win32k Elevation of Privilege VulnerabilityHIGH7.895.4%ileMicrosoft2024-06-11
CVE-2025-53143 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH8.895.3%ileMicrosoft2025-08-12
CVE-2026-4890 CVE-2026-4890HIGH7.595.2%ileMicrosoft2026-05-12
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.095.1%ileMicrosoft2026-08-11
CVE-2025-53766 GDI+ Remote Code Execution VulnerabilityCRITICAL9.895.0%ileMicrosoft2025-08-12
CVE-2025-53144 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH8.895.0%ileMicrosoft2025-08-12
CVE-2025-53145 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH8.895.0%ileMicrosoft2025-08-12
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.894.9%ileMicrosoft2026-08-11
CVE-2026-41091 Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.894.9%ileMicrosoft2026-05-12
CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege VulnerabilityHIGH7.894.8%ileMicrosoft2024-06-11
CVE-2026-42824 M365 Copilot Information Disclosure VulnerabilityMEDIUM6.594.6%ileMicrosoft2026-06-09
CVE-2025-53786 Microsoft Exchange Server Hybrid Deployment Elevation of Privilege VulnerabilityHIGH8.094.5%ileMicrosoft2025-08-12
CVE-2025-9478 Chromium: CVE-2025-9478 Use after free in ANGLEUNKNOWN—94.4%ileMicrosoft2025-08-12
CVE-2025-21204 Windows Process Activation Elevation of Privilege VulnerabilityHIGH7.894.3%ileMicrosoft2025-04-08
CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCRITICAL9.194.1%ileMicrosoft2026-05-12
CVE-2026-42980 NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.894.1%ileMicrosoft2026-06-09
CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityHIGH8.193.8%ileMicrosoft2026-06-09
CVE-2026-4891 CVE-2026-4891MEDIUM5.393.7%ileMicrosoft2026-05-12
CVE-2025-60724 Windows GDI+ Remote Code Execution VulnerabilityCRITICAL9.893.6%ileMicrosoft2025-11-11
CVE-2026-42533 NGINX Map directive and Regex matching vulnerabilityHIGH8.193.6%ileMicrosoft2026-07-14
CVE-2024-30084 Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.093.2%ileMicrosoft2024-06-11
CVE-2026-10886 Chromium: CVE-2026-10886 Use after free in FileSystemUNKNOWN—93.2%ileMicrosoft2026-06-09
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege VulnerabilityCRITICAL9.192.7%ileMicrosoft2026-05-12
CVE-2015-3310 Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when thUNKNOWN—92.7%ileMicrosoft2025-08-12
CVE-2025-4664 Chromium: CVE-2025-4664 Insufficient policy enforcement in LoaderUNKNOWN—92.7%ileMicrosoft2025-05-13
CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution VulnerabilityHIGH8.892.5%ileMicrosoft2024-06-11
CVE-2026-50507 Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.892.3%ileMicrosoft2026-06-09
CVE-2024-5841 Chromium: CVE-2024-5841 Use after free in V8UNKNOWN—92.2%ileMicrosoft2024-06-11
CVE-2025-13223 Chromium: CVE-2025-13223 Type Confusion in V8UNKNOWN—92.1%ileMicrosoft2025-11-11
CVE-2025-29794 Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.892.0%ileMicrosoft2025-04-08
CVE-2026-40369 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.891.8%ileMicrosoft2026-05-12
CVE-2025-50177 Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH8.191.7%ileMicrosoft2025-08-12
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege VulnerabilityHIGH7.891.7%ileMicrosoft2025-11-11
CVE-2026-104286 FortiMail zero-day: unauthenticated arbitrary file write via path traversal (no patch yet)CRITICAL9.891.6%ileFeatured2026-10-01
CVE-2026-40364 Microsoft Word Remote Code Execution VulnerabilityHIGH8.491.4%ileMicrosoft2026-05-12
CVE-2025-62215 Windows Kernel Elevation of Privilege VulnerabilityHIGH7.091.4%ileMicrosoft2025-11-11
CVE-2026-46242 eventpoll: fix ep_remove struct eventpoll / struct file UAFHIGH7.891.3%ileMicrosoft2026-05-12
CVE-2025-30388 Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.891.3%ileMicrosoft2025-05-13
CVE-2024-30091 Win32k Elevation of Privilege VulnerabilityHIGH7.891.1%ileMicrosoft2024-06-11
CVE-2025-29809 Windows Kerberos Security Feature Bypass VulnerabilityHIGH7.191.1%ileMicrosoft2025-04-08
CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logicMEDIUM5.591.1%ileMicrosoft2026-05-12
CVE-2026-50646 .NET Framework Remote Code Execution VulnerabilityHIGH7.890.6%ileMicrosoft2026-07-14
CVE-2026-50649 .NET Remote Code Execution VulnerabilityHIGH7.890.6%ileMicrosoft2026-07-14
CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code executionUNKNOWN—90.6%ileMicrosoft2026-05-12
CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() FunctionHIGH8.890.5%ileMicrosoft2026-06-09
CVE-2026-55200 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cHIGH8.190.2%ileMicrosoft2026-06-09

Updated 2026-11-02. EPSS = Exploit Prediction Scoring System (FIRST.org). TRENDING = EPSS jumped ≥5 percentage points since yesterday.