Public arsenal
Exploits
871 indexed CVEs have a ready-to-use public exploit, 108 of them in the CISA KEV catalog and 330 affecting a tracked app.
- CVEs with exploit
- 871
- Exploits catalogued
- 1,034
- In CISA KEV
- 108
- On tracked fleet
- 330
| CVE | Severity | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2017-0118
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 23% | |
|
CVE-2024-21320
Windows Themes Spoofing Vulnerability |
HIGH | ExploitDB | 23% | |
|
CVE-2017-8683
Microsoft Graphics Component Information Disclosure Vulnerability |
HIGH | ExploitDB | 23% | |
|
CVE-2017-0085
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0091
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0092
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0111
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0112
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0113
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0114
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0115
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0116
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0117
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0119
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0122
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0123
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0124
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0125
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0126
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0127
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0128
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-8550
Skype for Business Remote Code Execution Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0120
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2025-47166
Microsoft SharePoint Server Remote Code Execution Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2018-0878
Windows Remote Assistance Information Disclosure Vulnerability |
HIGH | ExploitDB | 21% | |
|
CVE-2016-3223
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win… |
HIGH | ExploitDB | 21% | |
|
CVE-2019-1127
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 21% | |
|
CVE-2017-13156
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 20% | |
|
CVE-2016-3309
KEV
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 20% | |
|
CVE-2024-38200
Microsoft Office Spoofing Vulnerability |
HIGH | ExploitDB | 20% | — |
|
CVE-2019-0573
Windows Data Sharing Service Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 20% | |
|
CVE-2016-3387
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remo… |
HIGH | ExploitDB | 20% | 
|
|
CVE-2019-0574
Windows Data Sharing Service Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-1119
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-1215
KEV
Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-1322
KEV
Microsoft Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2020-6507
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruptio… |
HIGH | ExploitDB | 19% | 
|
|
CVE-2019-12735
Microsoft Security Update Guide entry — NVD enrichira. |
HIGH | ExploitDB | 19% | — |
|
CVE-2019-0566
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Priv… |
HIGH | ExploitDB | 19% |
|
|
CVE-2018-8897
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 18% | |
|
CVE-2019-1124
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 18% | |
|
CVE-2017-0062
Windows GDI Information Disclosure Vulnerability |
HIGH | ExploitDB | 18% | |
|
CVE-2016-3373
Windows Kernel Local Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-6706
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example a crash outcome might be achieved by an attacker who is … |
HIGH | ExploitDB | 17% | — |
|
CVE-2016-3237
Kerberos Security Feature Bypass Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1120
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1121
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1122
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1123
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1128
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% |
Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.