Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,786exploited vulnerabilities tracked
5added in 7 days
38added in 30 days
38rising fast
361used by ransomware
667to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | 81.1% |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | 86.5% |
| CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass Vulnerability | 99.8% |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 2.6% |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3.0% |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 4.2% |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | 76.0% |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 13.4% |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | 28.8% |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | 11.0% |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | 10.5% |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | 7.0% |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | 3.0% |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 3.7% |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | 3.5% |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 4.5% |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | 68.5% |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 33.2% |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 63.2% |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 9.0% |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 7.4% |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 64.7% |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 85.7% |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 5.4% |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 12.1% |
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 52.1% |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | 8.4% |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 3.1% |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 82.9% |
| CVE-2021-27104 | Accellion FTA OS Command Injection Vulnerability | 56.7% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.