BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:52 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 48 of 71

  1. Added to KEVMar 28, 2022
    CVE-2018-84057.8 HIGH⚡ Known ExploitedMicrosoft DirectX Graphics Kernel (DXGKRNL)
    Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVMar 28, 2022
    CVE-2017-02137.3 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityMicrosoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.
    ScoreSeverityVersionVector String
    7.3HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
    1.9LOW2.0NVDAV:L/AC:M/Au:N/C:N/I:P/A:N
  3. Added to KEVMar 28, 2022
    CVE-2017-00594.3 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Information Disclosure VulnerabilityMicrosoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.
    ScoreSeverityVersionVector String
    4.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  4. Added to KEVMar 28, 2022
    CVE-2017-00378.1 HIGH⚡ Known ExploitedMicrosoft Edge and Internet Explorer
    Microsoft Edge and Internet Explorer Type Confusion VulnerabilityMicrosoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 28, 2022
    CVE-2016-72018.8 HIGH⚡ Known ExploitedMicrosoft Edge
    Microsoft Edge Memory Corruption VulnerabilityThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  6. Added to KEVMar 28, 2022
    CVE-2016-72008.8 HIGH⚡ Known ExploitedMicrosoft Edge
    Microsoft Edge Memory Corruption VulnerabilityThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  7. Added to KEVMar 28, 2022
    CVE-2016-01897.5 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityThe Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  8. Added to KEVMar 28, 2022
    CVE-2016-01517.8 HIGH⚡ Known ExploitedMicrosoft Client-Server Run-time Subsystem (CSRSS)
    Microsoft Windows CSRSS Security Feature Bypass VulnerabilityThe Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  9. Added to KEVMar 28, 2022
    CVE-2016-00407.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityThe kernel in Microsoft Windows allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  10. Added to KEVMar 28, 2022
    CVE-2015-24268.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  11. Added to KEVMar 28, 2022
    CVE-2015-24198.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityJScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVMar 28, 2022
    CVE-2015-17708.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Uninitialized Memory Use VulnerabilityMicrosoft Office allows remote attackers to execute arbitrary code via a crafted Office document.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVMar 28, 2022
    CVE-2013-36607.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityThe EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  14. Added to KEVMar 28, 2022
    CVE-2013-27299.8 CRITICAL⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Arbitrary Integer Overflow VulnerabilityInteger overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVMar 28, 2022
    CVE-2013-25518.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Use-After-Free VulnerabilityUse-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  16. Added to KEVMar 28, 2022
    CVE-2013-24659.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE Unspecified VulnerabilityUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  17. Added to KEVMar 28, 2022
    CVE-2013-16908.8 HIGH⚡ Known ExploitedMozilla Firefox and Thunderbird
    Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityMozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVMar 28, 2022
    CVE-2012-50769.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE Sandbox Bypass VulnerabilityThe default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVMar 28, 2022
    CVE-2012-25397.8 HIGH⚡ Known ExploitedMicrosoft Word
    Microsoft Word Remote Code Execution VulnerabilityMicrosoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 28, 2022
    CVE-2012-20347.5 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Memory Corruption VulnerabilityAdobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  21. Added to KEVMar 28, 2022
    CVE-2012-05184.7 MEDIUM⚡ Known ExploitedOracle Fusion Middleware
    Oracle Fusion Middleware Unspecified VulnerabilityUnspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
    ScoreSeverityVersionVector String
    4.7MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  22. Added to KEVMar 28, 2022
    CVE-2011-20057.8 HIGH⚡ Known ExploitedMicrosoft Ancillary Function Driver (afd.sys)
    Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerabilityafd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVMar 28, 2022
    CVE-2010-43987.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityStack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVMar 25, 2022
    CVE-2022-263189.8 CRITICAL⚡ Known ExploitedWatchGuard Firebox and XTM Appliances
    WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionOn WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVMar 25, 2022
    CVE-2022-261439.8 CRITICAL⚡ Known ExploitedMitel MiCollab, MiVoice Business Express
    MiCollab, MiVoice Business Express Access Control VulnerabilityA vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:07 UTC.

CVE Database: Latest Vulnerabilities | Secure.com