Public arsenal

Exploits

867 indexed CVEs have a ready-to-use public exploit, 107 of them in the CISA KEV catalog and 326 affecting a tracked app.

CVEs with exploit: 867
Exploits catalogued: 1,030
In CISA KEV: 107
On tracked fleet: 326

All sources ExploitDB981 Nuclei49 KEV Tracked fleet

CVE	Severity	Sources	EPSS	Apps
CVE-2019-1458 KEV An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a…	HIGH	ExploitDB	74%	Windows
CVE-2018-8120 KEV An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a…	HIGH	ExploitDB	74%	—
CVE-2018-0824 KEV Microsoft COM for Windows Remote Code Execution Vulnerability	HIGH	ExploitDB	73%	Windows
CVE-2019-2215 KEV Indexed via Android Security Bulletin — full NVD metadata pending.	HIGH	ExploitDB	72%	Android
CVE-2018-8453 KEV An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a…	HIGH	ExploitDB	70%	Windows
CVE-2016-0185 KEV Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via…	HIGH	ExploitDB	70%	—
CVE-2013-1690 KEV Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do…	HIGH	ExploitDB	69%
CVE-2019-18426 KEV A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 all…	HIGH	ExploitDB	68%	WhatsApp
CVE-2016-0151 KEV The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windo…	HIGH	ExploitDB	63%	Windows
CVE-2017-0059 KEV Microsoft Browser Information Disclosure Vulnerability	HIGH	ExploitDB	62%	—
CVE-2024-21338 KEV Windows Kernel Elevation of Privilege Vulnerability	HIGH	ExploitDB	60%	Windows
CVE-2025-24054 KEV NTLM Hash Disclosure Spoofing Vulnerability	HIGH	ExploitDB	59%	Windows
CVE-2017-0101 KEV Windows Transaction Manager Elevation of Privilege Vulnerability	HIGH	ExploitDB	57%	—
CVE-2019-0541 KEV MSHTML Engine Remote Code Execution Vulnerability	HIGH	ExploitDB	53%	—
CVE-2019-0808 KEV Win32k Elevation of Privilege Vulnerability	HIGH	ExploitDB	53%	—
CVE-2019-17026 KEV Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of …	HIGH	ExploitDB	47%
CVE-2019-0803 KEV Win32k Elevation of Privilege Vulnerability	HIGH	ExploitDB	45%	Windows
CVE-2016-3235 KEV Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle libr…	HIGH	ExploitDB	43%	—
CVE-2019-0841 KEV Windows Elevation of Privilege Vulnerability	HIGH	ExploitDB	41%	Windows
CVE-2023-29336 KEV Win32k Elevation of Privilege Vulnerability	HIGH	ExploitDB	41%	Windows
CVE-2019-11707 KEV A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an e…	HIGH	ExploitDB	38%
CVE-2025-26633 KEV Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.	HIGH	ExploitDB	30%	Windows
CVE-2019-1405 KEV An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM obje…	HIGH	ExploitDB	30%	Windows
CVE-2024-38193 KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH	ExploitDB	29%	Windows
CVE-2025-30397 KEV Scripting Engine Memory Corruption Vulnerability	HIGH	ExploitDB	27%	Windows
CVE-2024-49138 KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2021-3560 KEV It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the…	HIGH	ExploitDB	22%	—
CVE-2026-2441 KEV Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbo…	HIGH	ExploitDB	22%
CVE-2016-3309 KEV Windows Kernel Elevation of Privilege Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2019-1215 KEV Windows Elevation of Privilege Vulnerability	HIGH	ExploitDB	19%	Windows
CVE-2019-1322 KEV Microsoft Windows Elevation of Privilege Vulnerability	HIGH	ExploitDB	19%	Windows
CVE-2016-0165 KEV The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…	HIGH	ExploitDB	14%	Windows
CVE-2019-1253 KEV Windows Elevation of Privilege Vulnerability	HIGH	ExploitDB	12%	Windows
CVE-2017-0263 KEV Win32k Elevation of Privilege Vulnerability	HIGH	ExploitDB	10%	Windows
CVE-2025-21333 KEV Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability	HIGH	ExploitDB	10%	Windows
CVE-2019-1132 KEV Win32k Elevation of Privilege Vulnerability	HIGH	ExploitDB	10%	—
CVE-2025-2783 KEV Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remo…	HIGH	ExploitDB	9%
CVE-2020-0683 KEV Windows Installer Elevation of Privilege Vulnerability	HIGH	ExploitDB	8%	Windows
CVE-2019-0863 KEV Windows Error Reporting Elevation of Privilege Vulnerability	HIGH	ExploitDB	5%	Windows
CVE-2019-0543 KEV Microsoft Windows Elevation of Privilege Vulnerability	HIGH	ExploitDB	5%	Windows
CVE-2009-3459 KEV Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attac…	HIGH	ExploitDB	—
CVE-2026-32202 KEV Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.	MEDIUM	ExploitDB	64%	Windows

Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.