BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 12:12 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 44 of 71

  1. Added to KEVMay 24, 2022
    CVE-2017-00226.5 MEDIUM⚡ Known ExploitedMicrosoft XML Core Services
    Microsoft XML Core Services Information Disclosure VulnerabilityMicrosoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  2. Added to KEVMay 24, 2022
    CVE-2017-00057.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityThe Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  3. Added to KEVMay 24, 2022
    CVE-2016-63677.8 HIGH⚡ Known ExploitedCisco Adaptive Security Appliance (ASA)
    Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityA vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:L/AC:L/Au:S/C:C/I:C/A:C
  4. Added to KEVMay 24, 2022
    CVE-2016-63668.8 HIGH⚡ Known ExploitedCisco Adaptive Security Appliance (ASA)
    Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityA buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.5HIGH2.0NVDAV:N/AC:M/Au:S/C:C/I:C/A:C
  5. Added to KEVMay 24, 2022
    CVE-2016-46578.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS Webkit Memory Corruption VulnerabilityApple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  6. Added to KEVMay 24, 2022
    CVE-2016-46567.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS Memory Corruption VulnerabilityA memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  7. Added to KEVMay 24, 2022
    CVE-2016-46555.5 MEDIUM⚡ Known ExploitedApple iOS
    Apple iOS Information Disclosure VulnerabilityThe Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    7.1HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:N/A:N
  8. Added to KEVMay 24, 2022
    CVE-2016-33516.5 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer and Edge
    Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityAn information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    2.6LOW2.0NVDAV:N/AC:H/Au:N/C:P/I:N/A:N
  9. Added to KEVMay 24, 2022
    CVE-2016-32986.5 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityAn information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    2.6LOW2.0NVDAV:N/AC:H/Au:N/C:P/I:N/A:N
  10. Added to KEVMay 24, 2022
    CVE-2016-01624.3 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Information Disclosure VulnerabilityAn information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
    ScoreSeverityVersionVector String
    4.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  11. Added to KEVMay 23, 2022
    CVE-2022-208216.5 MEDIUM⚡ Known ExploitedCisco IOS XR
    Cisco IOS XR Open Port VulnerabilityCisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
    6.4MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:N
  12. Added to KEVMay 23, 2022
    CVE-2021-308837.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVMay 23, 2022
    CVE-2021-10487.8 HIGH⚡ Known ExploitedAndroid Kernel
    Android Kernel Use-After-Free VulnerabilityAndroid kernel contains a use-after-free vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVMay 23, 2022
    CVE-2021-09206.4 MEDIUM⚡ Known ExploitedAndroid Kernel
    Android Kernel Race Condition VulnerabilityAndroid kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.
    ScoreSeverityVersionVector String
    6.4MEDIUM3.1NVDCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  15. Added to KEVMay 23, 2022
    CVE-2020-10277.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVMay 23, 2022
    CVE-2020-06387.8 HIGH⚡ Known ExploitedMicrosoft Update Notification Manager
    Microsoft Update Notification Manager Privilege Escalation VulnerabilityMicrosoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  17. Added to KEVMay 23, 2022
    CVE-2019-184268.2 HIGH⚡ Known ExploitedMeta Platforms WhatsApp
    WhatsApp Cross-Site Scripting VulnerabilityA vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
    ScoreSeverityVersionVector String
    8.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
    5.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:N
  18. Added to KEVMay 23, 2022
    CVE-2019-137208.8 HIGH⚡ Known ExploitedGoogle Chrome WebAudio
    Google Chrome WebAudio Use-After-Free VulnerabilityGoogle Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  19. Added to KEVMay 23, 2022
    CVE-2019-1170810.0 CRITICAL⚡ Known ExploitedMozilla Firefox and Thunderbird
    Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityMozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMay 23, 2022
    CVE-2019-117078.8 HIGH⚡ Known ExploitedMozilla Firefox and Thunderbird
    Mozilla Firefox and Thunderbird Type Confusion VulnerabilityMozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVMay 23, 2022
    CVE-2019-87208.8 HIGH⚡ Known ExploitedWebKitGTK WebKitGTK
    WebKitGTK Memory Corruption VulnerabilityWebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  22. Added to KEVMay 23, 2022
    CVE-2019-72877.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS Memory Corruption VulnerabilityApple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  23. Added to KEVMay 23, 2022
    CVE-2019-72867.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  24. Added to KEVMay 23, 2022
    CVE-2019-57866.5 MEDIUM⚡ Known ExploitedGoogle Chrome Blink
    Google Chrome Blink Use-After-Free VulnerabilityGoogle Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:P
  25. Added to KEVMay 23, 2022
    CVE-2019-13857.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.1MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:47 UTC.

CVE Database: Latest Vulnerabilities | Secure.com