Skip to main content
veriom
Menu

Explore Veriom products, resources, and account pages.

Free tool · No sign-in

CVE radar: the latest vulnerabilities, explained.

Every new CVE from NVD, with whether it is exploited in the wild (CISA KEV), how likely it is to be (FIRST EPSS), and what it means for your architecture in plain language.

Updated 11 Nov, 02:49 UTC from NVD, CISA KEV and FIRST EPSSMarkdownRSSJSON Feed

334Critical, last 7 days2,104High, last 7 days40Added to CISA KEV, 30 days1,779Exploited CVEs tracked

Patch first

Exploited in the wild, newest first.

CISA adds a CVE to its Known Exploited Vulnerabilities catalog when attackers are using it. Patch these first, then CVEs with a high EPSS score, then the most severe, starting with anything reachable from the internet.

  1. CVE-2026-124194

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    Medium6.5Exploited, CISA due date 2026-11-24EPSS not scored yet

    Microsoft Office and 6 moreCVSS 3.1 · 6.5CWE-356

  2. CVE-2026-125350

    Google Chromium Use-After-Free Vulnerability

    High8.8Exploited, CISA due date 2026-11-24EPSS not scored yet

    Google Chromium and 1 moreCVSS 3.1 · 8.8CWE-416

  3. CVE-2026-116606

    Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Critical9.3Exploited, CISA due date 2026-11-13EPSS 1.6%, higher than 76% of scored CVEs

    Barracuda Email Security Gateway (ESG)CVSS 4.0 · 9.3CWE-288

  4. CVE-2026-111560

    Barracuda Networks Multiple Products OS Command Injection Vulnerability

    High8.6Exploited, CISA due date 2026-11-13EPSS 1.1%, higher than 65% of scored CVEs

    Barracuda Email Security Gateway (ESG) and 5 moreCVSS 4.0 · 8.6CWE-78

  5. CVE-2026-111793

    Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

    Medium4.3Exploited, CISA due date 2026-11-24EPSS 0.27%, higher than 20% of scored CVEs

    Openwave Messaging Limited Webtop Media Transcoder and 2 moreCVSS 3.1 · 4.3CWE-669

Every exploited CVE

Trends

The last 30 days, by severity.

4,675 CVEs published, 346 of them critical. Many arrive without a score yet: NVD and the reporting organisations add CVSS over the following days.

CriticalHighMediumLowNot scored13 Oct 2026 to 11 Nov 2026
Show the numbers
DayCriticalHighMediumLowNot scored
13 Oct 202612000
14 Oct 202622000
15 Oct 202612000
16 Oct 202600100
17 Oct 202600000
18 Oct 202600000
19 Oct 202600000
20 Oct 202600000
21 Oct 202620000
22 Oct 202620000
23 Oct 202600000
24 Oct 202600000
25 Oct 202600000
26 Oct 202600000
27 Oct 202600000
28 Oct 202601000
29 Oct 202600000
30 Oct 202600000
31 Oct 202601000
1 Nov 202600000
2 Nov 202611000
3 Nov 202600100
4 Nov 202635158138321
5 Nov 202655213148361
6 Nov 202640146205476
7 Nov 2026571612321113
8 Nov 202623128143260
9 Nov 2026221492184239
10 Nov 2026103115158743233
11 Nov 202624610

Exploit likelihood (EPSS), last 30 days

  1. Under 1%713
  2. 1% to 10%25
  3. 10% to 50%2
  4. 50% or more7
  5. Not scored yet3928

Most affected vendors, last 30 days

  1. Microsoft1096
  2. IBM322
  3. Google168
  4. Apache Software Foundation157
  5. FFmpeg121
  6. Adobe112
  7. Mozilla108
  8. JetBrains89
  9. Red Hat77
  10. openemr60

Matching CVEs

121 CVEs match these filters, page 1 of 5.

  1. CVE-2026-123962

    Debian FreedomBox UNIX symbolic link following

    High8.4EPSS not scored yet

    Debian FreedomBoxCVSS 3.1 · 8.4CWE-61

    In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.

  2. CVE-2026-109518

    Debian APT time-of-check to time-of-use race

    High7.7EPSS 0.93%, higher than 61% of scored CVEs

    Debian APT and 1 moreCVSS 4.0 · 7.7CWE-62, CWE-367

    On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an…

  3. CVE-2026-24061

    GNU InetUtils Argument Injection Vulnerability

    Critical9.8Exploited, CISA due date 2026-02-16EPSS 99%, higher than 100% of scored CVEs

    GNU InetUtils and 1 moreCVSS 3.1 · 9.8CWE-88

    telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

  4. CVE-2025-41244

    Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

    High7.8Exploited, CISA due date 2025-11-20EPSS 16%, higher than 97% of scored CVEs

    Broadcom VMware Aria Operations and VMware Tools and 9 moreCVSS 3.1 · 7.8CWE-267

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this…

  5. CVE-2025-39682

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Critical9.8Exploited, CISA due date 2026-09-21EPSS 3.3%, higher than 89% of scored CVEs

    Linux Kernel and 5 moreCVSS 3.1 · 9.8CWE-754

    In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type…

  6. CVE-2025-38352

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    High7.8Exploited, CISA due date 2025-09-25EPSS 1.4%, higher than 72% of scored CVEs

    Linux Kernel and 3 moreCVSS 3.1 · 7.8CWE-367

    In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be…

  7. CVE-2025-6558

    Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

    High8.8Exploited, CISA due date 2025-08-12EPSS 11%, higher than 96% of scored CVEs

    Google Chromium and 9 moreCVSS 3.1 · 8.8CWE-20

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  8. CVE-2025-48384

    Git Link Following Vulnerability

    High8.0Exploited, CISA due date 2025-09-15EPSS 4.4%, higher than 91% of scored CVEs

    Git and 3 moreCVSS 3.1 · 8.0CWE-59, CWE-436

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a…

  9. CVE-2025-32463

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    High7.8Exploited, CISA due date 2025-10-20EPSS 56%, higher than 99% of scored CVEs

    Sudo and 8 moreCVSS 3.1 · 7.8CWE-829

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

  10. CVE-2025-49113

    RoundCube Webmail Deserialization of Untrusted Data Vulnerability

    High8.8Exploited, CISA due date 2026-03-13EPSS 100%, higher than 100% of scored CVEs

    Roundcube Webmail and 1 moreCVSS 3.1 · 8.8CWE-502

    Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.

  11. CVE-2025-32433

    Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

    Critical10.0Exploited, CISA due date 2025-06-30EPSS 99%, higher than 100% of scored CVEs

    Erlang Erlang/OTP and 9 moreCVSS 3.1 · 10.0CWE-306

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message…

  12. CVE-2025-24201

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    Critical10.0Exploited, CISA due date 2025-04-03EPSS 3.8%, higher than 90% of scored CVEs

    Apple Safari and 7 moreCVSS 3.1 · 10.0CWE-787

    An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS…

  13. CVE-2025-27363

    FreeType Out-of-Bounds Write Vulnerability

    High8.1Exploited, CISA due date 2025-05-27EPSS 28%, higher than 98% of scored CVEs

    FreeType and 1 moreCVSS 3.1 · 8.1CWE-787

    An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned…

  14. CVE-2025-24813

    Apache Tomcat Path Equivalence Vulnerability

    Critical9.8Exploited, CISA due date 2025-04-22EPSS 100%, higher than 100% of scored CVEs

    Apache Tomcat and 3 moreCVSS 3.1 · 9.8CWE-502, CWE-706

    Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from…

  15. CVE-2024-53197

    Linux Kernel Out-of-Bounds Access Vulnerability

    High7.8Exploited, CISA due date 2025-04-30EPSS 4.1%, higher than 91% of scored CVEs

    Linux Kernel and 3 moreCVSS 3.1 · 7.8CWE-787

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating…

  16. CVE-2024-53150

    Linux Kernel Out-of-Bounds Read Vulnerability

    High7.1Exploited, CISA due date 2025-04-30EPSS 1.4%, higher than 72% of scored CVEs

    Linux Kernel and 3 moreCVSS 3.1 · 7.1CWE-125

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device…

  17. CVE-2024-53104

    Linux Kernel Out-of-Bounds Write Vulnerability

    High7.8Exploited, CISA due date 2025-02-26EPSS 3.4%, higher than 89% of scored CVEs

    Linux Kernel and 3 moreCVSS 3.1 · 7.8CWE-787

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the…

  18. CVE-2024-44309

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    Medium6.3Exploited, CISA due date 2024-12-12EPSS 22%, higher than 98% of scored CVEs

    Apple Safari and 7 moreCVSS 3.1 · 6.3CWE-79

    A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site…

  19. CVE-2024-44308

    Apple Multiple Products Code Execution Vulnerability

    High8.8Exploited, CISA due date 2024-12-12EPSS 9.9%, higher than 96% of scored CVEs

    Apple Safari and 7 moreCVSS 3.1 · 8.8

    The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware…

  20. CVE-2024-50302

    Linux Kernel Use of Uninitialized Resource Vulnerability

    Medium5.5Exploited, CISA due date 2025-03-25EPSS 0.81%, higher than 57% of scored CVEs

    Linux Kernel and 7 moreCVSS 3.1 · 5.5CWE-908

    In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak…

  21. CVE-2024-9680

    Mozilla Firefox Use-After-Free Vulnerability

    Critical9.8Exploited, CISA due date 2024-11-05EPSS 23%, higher than 98% of scored CVEs

    Mozilla Firefox and 3 moreCVSS 3.1 · 9.8CWE-416

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR <…

  22. CVE-2024-36971

    Android Kernel Remote Code Execution Vulnerability

    High7.8Exploited, CISA due date 2024-08-28EPSS 2.7%, higher than 86% of scored CVEs

    Android Kernel and 3 moreCVSS 3.1 · 7.8CWE-416

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear…

  23. CVE-2024-37383

    RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

    Medium6.1Exploited, CISA due date 2024-11-14EPSS 74%, higher than 99% of scored CVEs

    Roundcube Webmail and 1 moreCVSS 3.1 · 6.1CWE-79

    Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

  24. CVE-2024-1086

    Linux Kernel Use-After-Free Vulnerability

    High7.8Exploited, CISA due date 2024-06-20EPSS 28%, higher than 98% of scored CVEs

    Linux Kernel and 9 moreCVSS 3.1 · 7.8CWE-416

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can…

  25. CVE-2023-7101

    Spreadsheet::ParseExcel Remote Code Execution Vulnerability

    High7.8Exploited, CISA due date 2024-01-23EPSS 19%, higher than 97% of scored CVEs

    Spreadsheet::ParseExcel and 4 moreCVSS 3.1 · 7.8CWE-94, CWE-95

    Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems…

Reading the radar

CVSS, KEV and EPSS, briefly.

What is a CVE?

A CVE is a public identifier for one vulnerability in one product, such as CVE-2026-59310. The CVE program assigns it; NVD, run by the US National Institute of Standards and Technology, adds scores, weakness classes and affected product lists.

What does the CVSS score tell me?

CVSS rates how severe a vulnerability is on its own, from 0 to 10, and its vector says how it is reached: over the network or locally, with or without an account, with or without someone clicking. It says nothing about whether anyone is exploiting it. The radar shows the newest CVSS version scored and names it, because version 4.0 and 3.1 scores differ.

What is CISA KEV?

The Known Exploited Vulnerabilities catalog is CISA's list of CVEs with reliable evidence of exploitation in the wild. US federal agencies must fix each one by its due date, and it is the strongest signal of what to patch first.

What is EPSS?

FIRST's Exploit Prediction Scoring System estimates the probability that a CVE will see exploitation activity in the next 30 days, recomputed daily. Most CVEs score well under 1%, so the radar also shows the percentile: how a CVE ranks against every scored CVE.

How should I prioritise?

Patch what CISA lists as exploited first. Then CVEs with a high EPSS score, then the most severe by CVSS. Within each group, start with whatever is reachable from the internet without an account.

Where do the explanations come from?

Veriom writes them from fixed templates over each record: the weakness class says what went wrong and where in an architecture it lives, the CVSS vector says how it is reached and what it affects, and KEV, EPSS and CISA's assessment say whether it is exploited. Nobody reviews each CVE by hand, so read the description and the references before acting.

How fresh is the data?

New and changed CVEs arrive from NVD every hour, the KEV catalog every six hours and EPSS scores once a day. Each page shows when the data was last updated.

Know where a vulnerable component would sit in your systems.

A CVE names a product. Whether it matters depends on where that product sits in your systems: what reaches it, which trust boundary it guards and what it can reach once compromised. Veriom maps your components, their relationships and your trust boundaries from your code, cloud and delivery evidence, so you can see where a component like this sits. The radar itself does not look at your systems.

See how Veriom maps an architectureTake the interactive tour

Sources

  • CVE records and CVSS scores from the NVD CVE API. This product uses the NVD API but is not endorsed or certified by the NVD.
  • Exploitation status from CISA’s Known Exploited Vulnerabilities catalog.
  • Exploit likelihood from FIRST’s Exploit Prediction Scoring System (EPSS), refreshed daily.
  • Explanations are written by Veriom from fixed templates over each record’s data, not by a person reviewing each CVE. Descriptions are quoted from the records as published. The radar covers CVEs published since 4 Nov 2026, plus every CVE in the KEV catalog.