Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
393,006 CVEs1,710 in CISA KEV17,375 with EPSS ≥ 10%Updated 15 September 2026
1,710 results · page 12 of 35
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | KEVHIGH 8.8EPSS 49.0% | 28 September 2023 |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | KEVMEDIUM 6.6EPSS 2.34% | 27 September 2023 |
| CVE-2023-40044 | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | KEVHIGH 8.8EPSS 90.1% | 27 September 2023 |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 1.12% | 27 September 2023 |
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 58.5% | 22 September 2023 |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | KEVHIGH 8.8EPSS 29.2% | 21 September 2023 |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 2.92% | 21 September 2023 |
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | KEVMEDIUM 5.5EPSS 4.55% | 21 September 2023 |
| CVE-2023-42793 | JetBrains TeamCity Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 19 September 2023 |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | KEVHIGH 7.2EPSS 4.74% | 19 September 2023 |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | KEVHIGH 7.5EPSS 99.7% | 14 September 2023 |
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | KEVHIGH 7.8EPSS 7.10% | 13 September 2023 |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 27.9% | 12 September 2023 |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | KEVMEDIUM 6.5EPSS 19.6% | 12 September 2023 |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | KEVHIGH 8.8EPSS 100.0% | 12 September 2023 |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | KEVHIGH 7.8EPSS 1.39% | 12 September 2023 |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 2.78% | 11 September 2023 |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS Command Injection Vulnerability | KEVHIGH 8.8EPSS 40.2% | 11 September 2023 |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 45.1% | 7 September 2023 |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | KEVHIGH 7.8EPSS 3.78% | 7 September 2023 |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | KEVCRITICAL 9.1EPSS 25.6% | 6 September 2023 |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | KEVHIGH 8.8EPSS 41.1% | 5 September 2023 |
| CVE-2023-41266 | Qlik Sense Path Traversal Vulnerability | KEVMEDIUM 6.5EPSS 84.8% | 29 August 2023 |
| CVE-2023-41265 | Qlik Sense HTTP Tunneling Vulnerability | KEVCRITICAL 9.9EPSS 88.2% | 29 August 2023 |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | KEVHIGH 7.5EPSS 1.29% | 29 August 2023 |
| CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability | KEVHIGH 7.8EPSS 98.0% | 23 August 2023 |
| CVE-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 21 August 2023 |
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 85.8% | 17 August 2023 |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 94.8% | 17 August 2023 |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | KEVCRITICAL 9.8EPSS 95.1% | 17 August 2023 |
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | KEVMEDIUM 5.3EPSS 90.0% | 17 August 2023 |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 15 August 2023 |
| CVE-2022-48503 | Apple Multiple Products Unspecified Vulnerability | KEVHIGH 8.8EPSS 3.21% | 14 August 2023 |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | KEVHIGH 7.5EPSS 14.0% | 8 August 2023 |
| CVE-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability | KEVHIGH 7.5EPSS 84.7% | 3 August 2023 |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | KEVHIGH 7.2EPSS 63.6% | 3 August 2023 |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 46.7% | 31 July 2023 |
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | KEVMEDIUM 5.5EPSS 2.88% | 27 July 2023 |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | KEVHIGH 8.8EPSS 18.9% | 27 July 2023 |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 25 July 2023 |
| CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.8EPSS 97.1% | 20 July 2023 |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | KEVCRITICAL 9.8EPSS 99.7% | 19 July 2023 |
| CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 12 July 2023 |
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | KEVHIGH 7.5EPSS 99.8% | 12 July 2023 |
| CVE-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability | KEVHIGH 7.5EPSS 98.9% | 11 July 2023 |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 43.4% | 11 July 2023 |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | KEVHIGH 8.8EPSS 15.5% | 11 July 2023 |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | KEVHIGH 8.8EPSS 4.16% | 11 July 2023 |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 10.0% | 11 July 2023 |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | KEVCRITICAL 9.8EPSS 97.3% | 10 July 2023 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. Patch KEV entries first, then anything with an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS and the CISA KEV catalogue. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.