Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,784exploited vulnerabilities tracked
7added in 7 days
36added in 30 days
38rising fast
361used by ransomware
665to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2025-30066 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 72.1% |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 7.2% |
| CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 3.8% |
| CVE-2025-21590 | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | 1.7% |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | 30.4% |
| CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 2.2% |
| CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 2.0% |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 3.9% |
| CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure Vulnerability | 2.0% |
| CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free Vulnerability | 1.9% |
| CVE-2025-25181 | Advantive VeraCore SQL Injection Vulnerability | 55.5% |
| CVE-2024-57968 | Advantive VeraCore Unrestricted File Upload Vulnerability | 32.3% |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 89.8% |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 91.0% |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 99.99% |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | 1.6% |
| CVE-2025-22225 | VMware ESXi Arbitrary Write Vulnerability | 1.0% |
| CVE-2025-22224 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 1.6% |
| CVE-2024-50302 | Linux Kernel Use of Uninitialized Resource Vulnerability | 0.81% |
| CVE-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability | 99.3% |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection Vulnerability | 54.1% |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | 92.3% |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | 97.7% |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | 22.2% |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability | 1.3% |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 77.3% |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 3.9% |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability | 90.6% |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability | 1.6% |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability | 21.6% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.