Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,535 CVEs1,766 in CISA KEV17,506 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
1,766 results · page 13 of 36
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | KEVHIGH 8.8EPSS 49.0% | 28 September 2023 |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | KEVMEDIUM 6.6EPSS 2.50% | 27 September 2023 |
| CVE-2023-40044 | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | KEVHIGH 8.8EPSS 90.4% | 27 September 2023 |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 1.12% | 27 September 2023 |
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 63.7% | 22 September 2023 |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | KEVHIGH 8.8EPSS 24.3% | 21 September 2023 |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 9.52% | 21 September 2023 |
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | KEVMEDIUM 5.5EPSS 13.4% | 21 September 2023 |
| CVE-2023-42793 | JetBrains TeamCity Authentication Bypass Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 100.0% | 19 September 2023 |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | KEVHIGH 7.2EPSS 4.22% | 19 September 2023 |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | KEVHIGH 7.5EPSS 99.8% | 14 September 2023 |
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | KEVHIGH 7.8EPSS 6.75% | 13 September 2023 |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 27.9% | 12 September 2023 |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | KEVMEDIUM 6.5EPSS 19.6% | 12 September 2023 |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | KEVHIGH 8.8EPSS 100.0% | 12 September 2023 |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | KEVHIGH 7.8EPSS 1.39% | 12 September 2023 |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 2.64% | 11 September 2023 |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS Command Injection Vulnerability | KEVHIGH 8.8EPSS 39.5% | 11 September 2023 |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 53.4% | 7 September 2023 |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | KEVHIGH 7.8EPSS 4.41% | 7 September 2023 |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | KEVCRITICAL 9.1EPSS 26.6% | 6 September 2023 |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | KEVHIGH 8.8EPSS 41.4% | 5 September 2023 |
| CVE-2023-41266 | Qlik Sense Path Traversal Vulnerability | KEVMEDIUM 6.5EPSS 84.8% | 29 August 2023 |
| CVE-2023-41265 | Qlik Sense HTTP Tunneling Vulnerability | KEVCRITICAL 9.9EPSS 88.2% | 29 August 2023 |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | KEVHIGH 7.5EPSS 1.36% | 29 August 2023 |
| CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability | KEVHIGH 7.8EPSS 99.8% | 23 August 2023 |
| CVE-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 21 August 2023 |
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 83.5% | 17 August 2023 |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | KEVMEDIUM 5.3EPSS 93.5% | 17 August 2023 |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | KEVCRITICAL 9.8EPSS 95.1% | 17 August 2023 |
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | KEVMEDIUM 5.3EPSS 90.0% | 17 August 2023 |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 15 August 2023 |
| CVE-2022-48503 | Apple Multiple Products Unspecified Vulnerability | KEVHIGH 8.8EPSS 3.21% | 14 August 2023 |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | KEVHIGH 7.5EPSS 14.1% | 8 August 2023 |
| CVE-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability | KEVHIGH 7.5EPSS 92.5% | 3 August 2023 |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | KEVHIGH 7.2EPSS 63.6% | 3 August 2023 |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 49.1% | 31 July 2023 |
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | KEVMEDIUM 5.5EPSS 2.90% | 27 July 2023 |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | KEVHIGH 8.8EPSS 18.9% | 27 July 2023 |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 25 July 2023 |
| CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.8EPSS 97.1% | 20 July 2023 |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | KEVCRITICAL 9.8EPSS 99.7% | 19 July 2023 |
| CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.8EPSS 100.0% | 12 July 2023 |
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | KEVHIGH 7.5EPSS 99.8% | 12 July 2023 |
| CVE-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability | KEVHIGH 7.5EPSS 99.4% | 11 July 2023 |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 42.6% | 11 July 2023 |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | KEVHIGH 8.8EPSS 15.5% | 11 July 2023 |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | KEVHIGH 8.8EPSS 4.16% | 11 July 2023 |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 9.97% | 11 July 2023 |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | KEVCRITICAL 9.8EPSS 97.3% | 10 July 2023 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.