Public arsenal
Exploits
871 indexed CVEs have a ready-to-use public exploit, 108 of them in the CISA KEV catalog and 330 affecting a tracked app.
- CVEs with exploit
- 871
- Exploits catalogued
- 1,034
- In CISA KEV
- 108
- On tracked fleet
- 330
| CVE | Severity | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2018-0777
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i… |
HIGH | ExploitDB | 78% | 
|
|
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result … |
HIGH | ExploitDB | 78% | |
|
CVE-2014-1761
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Ma… |
HIGH | ExploitDB | 78% | 
|
|
CVE-2024-23334
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal |
HIGH | ExploitDB Nuclei | 77% | — |
|
CVE-2019-1458
KEV
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a… |
HIGH | ExploitDB | 74% | |
|
CVE-2017-5715
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 74% | |
|
CVE-2018-8120
KEV
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a… |
HIGH | ExploitDB | 73% | — |
|
CVE-2025-6965
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of colu… |
HIGH | ExploitDB | 73% | |
|
CVE-2016-7202
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary … |
HIGH | ExploitDB | 73% |
|
|
CVE-2018-0824
KEV
Microsoft COM for Windows Remote Code Execution Vulnerability |
HIGH | ExploitDB | 73% | |
|
CVE-2017-8729
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due … |
HIGH | ExploitDB | 72% |
|
|
CVE-2017-8740
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due … |
HIGH | ExploitDB | 72% |
|
|
CVE-2017-8636
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 an… |
HIGH | ExploitDB | 72% |
|
|
CVE-2019-2215
KEV
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 72% | |
|
CVE-2017-8641
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 an… |
HIGH | ExploitDB | 72% |
|
|
CVE-2016-7241
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (… |
HIGH | ExploitDB | 71% |
|
|
CVE-2016-3247
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (… |
HIGH | ExploitDB | 71% |
|
|
CVE-2017-8755
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in … |
HIGH | ExploitDB | 71% |
|
|
CVE-2018-8229
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 71% |
|
|
CVE-2018-8279
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memor… |
HIGH | ExploitDB | 71% |
|
|
CVE-2024-4367
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. T… |
HIGH | ExploitDB | 71% | 
|
|
CVE-2016-7288
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… |
HIGH | ExploitDB | 70% |
|
|
CVE-2017-8634
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due t… |
HIGH | ExploitDB | 70% |
|
|
CVE-2019-1184
Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 70% | |
|
CVE-2018-8453
KEV
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, a… |
HIGH | ExploitDB | 70% | |
|
CVE-2016-0185
KEV
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via… |
HIGH | ExploitDB | 70% | — |
|
CVE-2017-11873
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows a… |
HIGH | ExploitDB | 70% |
|
|
CVE-2019-0568
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8640
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the … |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8645
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the contex… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8646
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the contex… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8656
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the co… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8671
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in … |
HIGH | ExploitDB | 69% |
|
|
CVE-2018-8288
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… |
HIGH | ExploitDB | 69% |
|
|
CVE-2018-8291
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-11802
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execu… |
HIGH | ExploitDB | 69% |
|
|
CVE-2013-1690
KEV
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do… |
HIGH | ExploitDB | 69% |
|
|
CVE-2018-8466
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 69% |
|
|
CVE-2018-8467
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft E… |
HIGH | ExploitDB | 69% |
|
|
CVE-2016-7286
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… |
HIGH | ExploitDB | 69% |
|
|
CVE-2016-7287
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or ca… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-8670
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the co… |
HIGH | ExploitDB | 69% |
|
|
CVE-2017-11893
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra… |
HIGH | ExploitDB | 68% |
|
|
CVE-2018-8355
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… |
HIGH | ExploitDB | 68% |
|
|
CVE-2017-11809
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execu… |
HIGH | ExploitDB | 68% |
|
|
CVE-2018-0774
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the… |
HIGH | ExploitDB | 68% |
|
|
CVE-2018-0775
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the… |
HIGH | ExploitDB | 68% |
|
|
CVE-2019-18426
KEV
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 all… |
HIGH | ExploitDB | 68% | 
|
|
CVE-2018-8353
Scripting Engine Memory Corruption Vulnerability |
HIGH | ExploitDB | 68% | — |
|
CVE-2017-8548
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain informati… |
HIGH | ExploitDB | 68% |
|
Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.