Public arsenal

Exploits

867 indexed CVEs have a ready-to-use public exploit, 107 of them in the CISA KEV catalog and 326 affecting a tracked app.

CVEs with exploit: 867
Exploits catalogued: 1,030
In CISA KEV: 107
On tracked fleet: 326

All sources ExploitDB981 Nuclei49 KEV Tracked fleet

CVE	Severity	Sources	EPSS	Apps
CVE-2016-7182 Graphics Component Font Parsing Elevation of Privilege Vulnerability	HIGH	ExploitDB	30%	Windows
CVE-2019-1405 KEV An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM obje…	HIGH	ExploitDB	30%	Windows
CVE-2016-0016 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold …	HIGH	ExploitDB	30%	Windows
CVE-2019-9810 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buf…	HIGH	ExploitDB	30%
CVE-2024-38193 KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH	ExploitDB	29%	Windows
CVE-2016-3324 Internet Explorer Memory Corruption Vulnerability	HIGH	ExploitDB	28%	—
CVE-2025-11001 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe…	HIGH	ExploitDB	27%
CVE-2025-30397 KEV Scripting Engine Memory Corruption Vulnerability	HIGH	ExploitDB	27%	Windows
CVE-2018-8269 OData Denial of Service Vulnerability	HIGH	ExploitDB	27%	—
CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.	HIGH	ExploitDB	26%	—
CVE-2025-50154 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	26%	Windows
CVE-2024-49138 KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2019-0572 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2017-11906 Internet Explorer Information Disclosure Vulnerability	HIGH	ExploitDB	25%	—
CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2019-1117 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2019-1118 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2018-8527 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2018-8532 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2017-0118 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2024-21320 Windows Themes Spoofing Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-8683 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-0085 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0091 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0092 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0111 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0112 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0113 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0114 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0115 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0116 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0117 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0119 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0122 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0123 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0124 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0125 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0126 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0127 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0128 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-8550 Skype for Business Remote Code Execution Vulnerability	HIGH	ExploitDB	22%	—
CVE-2021-3560 KEV It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the…	HIGH	ExploitDB	22%	—
CVE-2017-0120 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2026-2441 KEV Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbo…	HIGH	ExploitDB	22%
CVE-2018-0878 Windows Remote Assistance Information Disclosure Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2016-3223 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win…	HIGH	ExploitDB	21%	Windows
CVE-2019-1127 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2016-3309 KEV Windows Kernel Elevation of Privilege Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2017-13156 Indexed via Android Security Bulletin — full NVD metadata pending.	HIGH	ExploitDB	20%	Android
CVE-2024-38200 Microsoft Office Spoofing Vulnerability	HIGH	ExploitDB	20%	—

Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.