Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,593 CVEs1,766 in CISA KEV17,506 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
1,766 results · page 35 of 36
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 100.0% | 10 April 2012 |
| CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | KEVHIGH 7.8EPSS 87.7% | 10 April 2012 |
| CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | KEVMEDIUM 6.1EPSS 6.19% | 16 February 2012 |
| CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability | KEVEXPLOIT ✓HIGH 8.1EPSS 91.1% | 16 February 2012 |
| CVE-2012-0391 | Apache Struts 2 Improper Input Validation Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 75.6% | 8 January 2012 |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | KEVMEDIUM 5.7EPSS 3.06% | 20 December 2011 |
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 88.6% | 7 December 2011 |
| CVE-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability | KEVHIGH 8.8EPSS 78.1% | 4 November 2011 |
| CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 96.7% | 19 October 2011 |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 31.8% | 12 October 2011 |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability | KEVCRITICAL 9.8EPSS 49.0% | 16 June 2011 |
| CVE-2011-1823 | Android OS Privilege Escalation Vulnerability | KEVHIGH 7.8EPSS 41.4% | 9 June 2011 |
| CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 99.4% | 13 April 2011 |
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 63.5% | 15 March 2011 |
| CVE-2010-4345 | Exim Privilege Escalation Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 18.0% | 14 December 2010 |
| CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 71.7% | 14 December 2010 |
| CVE-2010-3904 | Linux Kernel Improper Input Validation Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 15.9% | 6 December 2010 |
| CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 8.66% | 6 December 2010 |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability | KEVEXPLOIT ×4 ✓HIGH 7.8EPSS 89.4% | 10 November 2010 |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 58.6% | 10 November 2010 |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | KEVEXPLOIT ×3 ✓HIGH 8.1EPSS 96.8% | 5 November 2010 |
| CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability | KEVEXPLOIT ×4 ✓CRITICAL 9.8EPSS 83.2% | 28 October 2010 |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.3EPSS 81.4% | 9 September 2010 |
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | KEVHIGH 7.5EPSS 5.67% | 30 August 2010 |
| CVE-2010-2861 | Adobe ColdFusion Directory Traversal Vulnerability | KEVEXPLOIT ×2 ✓CRITICAL 9.8EPSS 99.7% | 11 August 2010 |
| CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 83.4% | 5 August 2010 |
| CVE-2010-2568 | Microsoft Windows Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 89.6% | 22 July 2010 |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability | KEVEXPLOIT ×4 ✓HIGH 7.8EPSS 82.5% | 8 June 2010 |
| CVE-2010-1428 | Red Hat JBoss Information Disclosure Vulnerability | KEVHIGH 7.5EPSS 52.7% | 28 April 2010 |
| CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability | KEVEXPLOIT ×4 ✓MEDIUM 5.3EPSS 73.8% | 28 April 2010 |
| CVE-2010-0840 | Oracle JRE Unspecified Vulnerability | KEVEXPLOIT ✓CRITICAL 9.8EPSS 96.3% | 1 April 2010 |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 82.2% | 10 March 2010 |
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | KEVEXPLOIT ×4 ✓HIGH 7.8EPSS 88.2% | 22 February 2010 |
| CVE-2009-3960 | Adobe BlazeDS Information Disclosure Vulnerability | KEVEXPLOIT ×2 ✓MEDIUM 6.5EPSS 90.1% | 15 February 2010 |
| CVE-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability | KEVEXPLOIT ✓HIGH 7.8EPSS 28.7% | 21 January 2010 |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 91.9% | 15 January 2010 |
| CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | KEVEXPLOIT ✓HIGH 8.8EPSS 83.2% | 13 January 2010 |
| CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability | KEVEXPLOIT ×3 ✓HIGH 7.8EPSS 81.9% | 15 December 2009 |
| CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability | KEVEXPLOIT ×2 ✓HIGH 7.8EPSS 84.0% | 11 November 2009 |
| CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 86.6% | 13 October 2009 |
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | KEVMEDIUM 5.9EPSS 3.31% | 19 August 2009 |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | KEVHIGH 7.8EPSS 21.2% | 23 July 2009 |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | KEVEXPLOIT ×2 ✓HIGH 8.8EPSS 76.6% | 7 July 2009 |
| CVE-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability | KEVHIGH 7.8EPSS 4.88% | 10 June 2009 |
| CVE-2009-0557 | Microsoft Office Object Record Corruption Vulnerability | KEVHIGH 7.8EPSS 52.8% | 10 June 2009 |
| CVE-2009-0563 | Microsoft Office Buffer Overflow Vulnerability | KEVHIGH 7.8EPSS 59.6% | 10 June 2009 |
| CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability | KEVHIGH 8.8EPSS 51.4% | 29 May 2009 |
| CVE-2009-0556 | Microsoft Office PowerPoint Code Injection Vulnerability | KEVHIGH 8.8EPSS 67.3% | 3 April 2009 |
| CVE-2009-1151 | phpMyAdmin Remote Code Execution Vulnerability | KEVEXPLOIT ×3 ✓CRITICAL 9.8EPSS 96.6% | 26 March 2009 |
| CVE-2009-0927 | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | KEVEXPLOIT ×4 ✓HIGH 8.8EPSS 96.6% | 19 March 2009 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.