CISA KEV · ENISA EUVD · FIRST EPSS

Exploited vulnerabilities

The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.

1,783exploited vulnerabilities tracked
8added in 7 days
35added in 30 days
37rising fast
361used by ransomware
665to fix within 24 h
32 vulnerabilities Clear filters Data updated on 03 Nov 2026
CVEProductPhaseEPSSCVSSIndexExploited on
CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityRising fast16.1%7.85.428 Oct 2026
CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityActively exploited0.93%8.84.718 Sept 2026
CVE-2025-39964Linux Kernel Race Condition VulnerabilityActively exploited1.6%7.84.418 Sept 2026
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityActively exploited3.3%9.85.818 Sept 2026
CVE-2026-53362Linux Kernel Unspecified VulnerabilityActively exploited0.71%7.84.327 Aug 2026
CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityActively exploited8.9%7.84.626 Aug 2026
CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityActively exploited5.5%7.84.502 Jun 2026
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityBackground exploitation98.1%7.87.901 May 2026
CVE-2018-14634Linux Kernel Integer Overflow VulnerabilityBackground exploitation14.7%7.85.426 Jan 2026
CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write VulnerabilityBackground exploitation78.7%8.37.506 Oct 2025
CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityBackground exploitation1.4%7.84.404 Sept 2025
CVE-2023-0386Linux Kernel Improper Ownership Management VulnerabilityBackground exploitation7.9%7.84.617 Jun 2025
CVE-2024-53197Linux Kernel Out-of-Bounds Access VulnerabilityBackground exploitation4.1%7.84.409 Apr 2025
CVE-2024-53150Linux Kernel Out-of-Bounds Read VulnerabilityBackground exploitation1.4%7.14.109 Apr 2025
CVE-2024-50302Linux Kernel Use of Uninitialized Resource VulnerabilityBackground exploitation0.81%5.53.404 Mar 2025
CVE-2024-53104Linux Kernel Out-of-Bounds Write VulnerabilityBackground exploitation3.4%7.84.405 Feb 2025
CVE-2017-1000253Linux Kernel PIE Stack Buffer Corruption VulnerabilityBackground exploitation10.7%7.85.809 Sept 2024
CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow VulnerabilityBackground exploitation25.2%8.45.921 Aug 2024
CVE-2022-2586Linux Kernel Use-After-Free VulnerabilityBackground exploitation10.2%5.34.226 Jun 2024
CVE-2024-1086Linux Kernel Use-After-Free VulnerabilityBackground exploitation28.1%7.86.430 May 2024
CVE-2014-0196Linux Kernel Race Condition VulnerabilityBackground exploitation20.3%5.54.612 May 2023
CVE-2010-3904Linux Kernel Improper Input Validation VulnerabilityBackground exploitation15.9%7.85.412 May 2023
CVE-2023-0266Linux Kernel Use-After-Free VulnerabilityBackground exploitation3.7%7.94.530 Mar 2023
CVE-2021-3493Linux Kernel Privilege Escalation VulnerabilityBackground exploitation49.2%8.86.820 Oct 2022
CVE-2013-6282Linux Kernel Improper Input Validation VulnerabilityBackground exploitation39.7%8.86.515 Sept 2022
CVE-2013-2596Linux Kernel Integer Overflow VulnerabilityBackground exploitation3.2%7.84.415 Sept 2022
CVE-2013-2094Linux Kernel Privilege Escalation VulnerabilityBackground exploitation47.7%8.46.615 Sept 2022
CVE-2014-3153Linux Kernel Privilege Escalation VulnerabilityBackground exploitation37.2%7.86.025 May 2022
CVE-2022-0847Linux Kernel Privilege Escalation VulnerabilityBackground exploitation92.8%7.87.725 Apr 2022
CVE-2021-22600Linux Kernel Privilege Escalation VulnerabilityBackground exploitation6.6%6.64.011 Apr 2022

How we rank vulnerabilities

A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.

The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.

Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.

Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.