SOC status:Duty analyst on shift

UK Cyber Defence

Tools / CVE Explorer

Which vulnerabilities actually matter?

Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.

393,123 CVEs1,710 in CISA KEV17,380 with EPSS ≥ 10%Updated 16 September 2026

1,710 results · page 35 of 35

CVESummaryPriorityPublished
CVE-2007-5659Adobe Acrobat and Reader Buffer Overflow VulnerabilityKEVHIGH 7.8EPSS 94.0%12 February 2008
CVE-2008-0655Adobe Acrobat and Reader Unspecified VulnerabilityKEVHIGH 8.8EPSS 39.0%7 February 2008
CVE-2007-3010Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityKEVCRITICAL 9.8EPSS 97.4%18 September 2007
CVE-2007-0671Microsoft Office Excel Remote Code Execution VulnerabilityKEVHIGH 8.8EPSS 42.4%3 February 2007
CVE-2006-2492Microsoft Word Malformed Object Pointer VulnerabilityKEVHIGH 8.8EPSS 48.1%20 May 2006
CVE-2006-1547Apache Struts 1 ActionForm Denial-of-Service VulnerabilityKEVHIGH 7.5EPSS 54.6%30 March 2006
CVE-2005-2773HP OpenView Network Node Manager Remote Code Execution VulnerabilityKEVCRITICAL 9.8EPSS 74.6%2 September 2005
CVE-2004-1464Cisco IOS Denial-of-Service VulnerabilityKEVMEDIUM 5.9EPSS 4.84%31 December 2004
CVE-2004-0210Microsoft Windows Privilege Escalation VulnerabilityKEVHIGH 7.8EPSS 7.21%6 August 2004
CVE-2002-0367Microsoft Windows Privilege Escalation VulnerabilityKEVHIGH 7.8EPSS 4.92%25 June 2002

How to read this

CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. Patch KEV entries first, then anything with an EPSS above 10 per cent, then work down by CVSS in your normal cycle.

Data is refreshed daily from the NVD, FIRST EPSS and the CISA KEV catalogue. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.