Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,593 CVEs1,766 in CISA KEV17,506 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
1,766 results · page 33 of 36
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2015-1701 | Microsoft Win32k Privilege Escalation Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 55.9% | 21 April 2015 |
| CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 73.9% | 14 April 2015 |
| CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability | KEVHIGH 7.8EPSS 97.2% | 14 April 2015 |
| CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution Vulnerability | KEVEXPLOIT ×2CRITICAL 9.8EPSS 100.0% | 14 April 2015 |
| CVE-2015-1130 | Apple OS X Authentication Bypass Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 9.89% | 10 April 2015 |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | KEVHIGH 7.5EPSS 40.4% | 3 April 2015 |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 97.1% | 23 February 2015 |
| CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 99.9% | 17 February 2015 |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability | KEVMEDIUM 6.5EPSS 33.6% | 11 February 2015 |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 95.3% | 2 February 2015 |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 85.6% | 23 January 2015 |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability | KEVHIGH 7.8EPSS 15.1% | 23 January 2015 |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 75.8% | 13 January 2015 |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | KEVHIGH 8.0EPSS 43.5% | 13 January 2015 |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 44.9% | 10 December 2014 |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability | KEVHIGH 8.8EPSS 20.4% | 25 November 2014 |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 87.3% | 18 November 2014 |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | KEVEXPLOIT ×9 ✓HIGH 8.8EPSS 94.9% | 11 November 2014 |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 54.6% | 11 November 2014 |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability | KEVEXPLOIT ×6 ✓HIGH 7.8EPSS 77.5% | 22 October 2014 |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 59.9% | 15 October 2014 |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 47.1% | 15 October 2014 |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | KEVEXPLOIT ×6 ✓HIGH 7.8EPSS 81.6% | 15 October 2014 |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability | KEVEXPLOIT ×4 ✓HIGH 7.8EPSS 86.6% | 15 October 2014 |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | KEVEXPLOIT ×4 ✓CRITICAL 9.8EPSS 99.3% | 7 October 2014 |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | KEVEXPLOIT ×5 ✓HIGH 8.8EPSS 99.7% | 30 September 2014 |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ×15 ✓CRITICAL 9.8EPSS 99.9% | 25 September 2014 |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ×21 ✓CRITICAL 9.8EPSS 100.0% | 24 September 2014 |
| CVE-2014-4404 | Apple OS X Heap-Based Buffer Overflow Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 48.9% | 18 September 2014 |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | KEVHIGH 8.4EPSS 1.50% | 31 August 2014 |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 26.3% | 12 August 2014 |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | KEVCRITICAL 9.8EPSS 22.3% | 12 August 2014 |
| CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.1EPSS 88.6% | 28 July 2014 |
| CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability | KEVMEDIUM 6.5EPSS 4.77% | 7 July 2014 |
| CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability | KEVEXPLOITHIGH 7.8EPSS 37.2% | 7 June 2014 |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | KEVHIGH 8.8EPSS 65.1% | 14 May 2014 |
| CVE-2014-0196 | Linux Kernel Race Condition Vulnerability | KEVEXPLOITMEDIUM 5.5EPSS 20.3% | 7 May 2014 |
| CVE-2014-0130 | Ruby on Rails Directory Traversal Vulnerability | KEVHIGH 7.5EPSS 53.7% | 7 May 2014 |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | KEVCRITICAL 9.8EPSS 82.7% | 27 April 2014 |
| CVE-2014-0780 | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 74.7% | 25 April 2014 |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability | KEVEXPLOIT ×4 ✓HIGH 7.5EPSS 100.0% | 7 April 2014 |
| CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 77.7% | 25 March 2014 |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 22.6% | 19 March 2014 |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability | KEVMEDIUM 6.5EPSS 50.2% | 26 February 2014 |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity | KEVHIGH 8.8EPSS 24.8% | 21 February 2014 |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 85.1% | 14 February 2014 |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | KEVEXPLOIT ✓CRITICAL 9.8EPSS 99.9% | 5 February 2014 |
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability | KEVHIGH 8.8EPSS 40.0% | 15 January 2014 |
| CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code Execution | KEVMEDIUM 5.5EPSS 44.6% | 11 December 2013 |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability | KEVEXPLOIT ×3 ✓HIGH 7.8EPSS 34.7% | 28 November 2013 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.