BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 14:21 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 41 of 71

  1. Added to KEVJun 8, 2022
    CVE-2019-58256.5 MEDIUM⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:P
  2. Added to KEVJun 8, 2022
    CVE-2018-174808.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  3. Added to KEVJun 8, 2022
    CVE-2018-174638.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Remote Code Execution VulnerabilityGoogle Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  4. Added to KEVJun 8, 2022
    CVE-2018-60658.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Integer Overflow VulnerabilityGoogle Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  5. Added to KEVJun 8, 2022
    CVE-2018-49908.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Double Free VulnerabilityAdobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  6. Added to KEVJun 8, 2022
    CVE-2017-68629.8 CRITICAL⚡ Known ExploitedNETGEAR Multiple Devices
    NETGEAR Multiple Devices Buffer Overflow VulnerabilityMultiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVJun 8, 2022
    CVE-2017-50708.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  8. Added to KEVJun 8, 2022
    CVE-2017-50308.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Memory Corruption VulnerabilityGoogle Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  9. Added to KEVJun 8, 2022
    CVE-2016-51988.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Out-of-Bounds Memory VulnerabilityGoogle Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  10. Added to KEVJun 8, 2022
    CVE-2016-16468.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Out-of-Bounds Read VulnerabilityGoogle Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  11. Added to KEVJun 8, 2022
    CVE-2013-13317.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Buffer Overflow VulnerabilityMicrosoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVJun 8, 2022
    CVE-2012-50548.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Integer Overflow VulnerabilityAdobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVJun 8, 2022
    CVE-2012-49698.1 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  14. Added to KEVJun 8, 2022
    CVE-2012-18898.8 HIGH⚡ Known ExploitedMicrosoft XML Core Services
    Microsoft XML Core Services Memory Corruption VulnerabilityMicrosoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  15. Added to KEVJun 8, 2022
    CVE-2012-07676.1 MEDIUM⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Cross-Site Scripting (XSS) VulnerabilityAdobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  16. Added to KEVJun 8, 2022
    CVE-2012-07548.1 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Memory Corruption VulnerabilityAdobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  17. Added to KEVJun 8, 2022
    CVE-2012-01517.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityThe Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVJun 8, 2022
    CVE-2011-24629.8 CRITICAL⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Universal 3D Memory Corruption VulnerabilityThe Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVJun 8, 2022
    CVE-2011-06097.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Unspecified VulnerabilityAdobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  20. Added to KEVJun 8, 2022
    CVE-2010-28837.3 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Stack-Based Buffer Overflow VulnerabilityAdobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.3HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  21. Added to KEVJun 8, 2022
    CVE-2010-25727.8 HIGH⚡ Known ExploitedMicrosoft PowerPoint
    Microsoft PowerPoint Buffer Overflow VulnerabilityMicrosoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  22. Added to KEVJun 8, 2022
    CVE-2010-12977.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Memory Corruption VulnerabilityAdobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  23. Added to KEVJun 8, 2022
    CVE-2009-43247.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Use-After-Free VulnerabilityUse-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  24. Added to KEVJun 8, 2022
    CVE-2009-39538.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Universal 3D Remote Code Execution VulnerabilityAdobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVJun 8, 2022
    CVE-2009-18627.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader, Flash Player
    Adobe Acrobat and Reader, Flash Player Unspecified VulnerabilityAdobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:27 UTC.

CVE Database: Latest Vulnerabilities | Secure.com