Public arsenal
Exploits
867 indexed CVEs have a ready-to-use public exploit, 107 of them in the CISA KEV catalog and 326 affecting a tracked app.
- CVEs with exploit
- 867
- Exploits catalogued
- 1,030
- In CISA KEV
- 107
- On tracked fleet
- 326
| CVE | Severity | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2017-0092
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0111
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0112
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0113
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0114
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0115
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0116
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0117
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0119
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0122
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0123
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0124
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0125
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0126
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0127
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0128
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-8550
Skype for Business Remote Code Execution Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2021-3560
KEV It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the… |
HIGH | ExploitDB | 22% | — |
|
CVE-2017-0120
Windows Uniscribe Information Disclosure Vulnerability |
HIGH | ExploitDB | 22% | — |
|
CVE-2026-2441
KEV Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbo… |
HIGH | ExploitDB | 22% | 
|
|
CVE-2018-0878
Windows Remote Assistance Information Disclosure Vulnerability |
HIGH | ExploitDB | 21% | |
|
CVE-2016-3223
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win… |
HIGH | ExploitDB | 21% | |
|
CVE-2019-1127
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 21% | |
|
CVE-2016-3309
KEV Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 21% | |
|
CVE-2017-13156
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 20% | |
|
CVE-2024-38200
Microsoft Office Spoofing Vulnerability |
HIGH | ExploitDB | 20% | — |
|
CVE-2019-0573
Windows Data Sharing Service Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 20% | |
|
CVE-2016-3387
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remo… |
HIGH | ExploitDB | 20% | 
|
|
CVE-2019-1119
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-0574
Windows Data Sharing Service Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-1215
KEV Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-1322
KEV Microsoft Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-12735
Microsoft Security Update Guide entry — NVD enrichira. |
HIGH | ExploitDB | 19% | — |
|
CVE-2020-6507
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruptio… |
HIGH | ExploitDB | 19% |
|
|
CVE-2018-8897
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 19% | |
|
CVE-2019-0566
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Priv… |
HIGH | ExploitDB | 19% |
|
|
CVE-2019-1124
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 18% | |
|
CVE-2017-0062
Windows GDI Information Disclosure Vulnerability |
HIGH | ExploitDB | 18% | |
|
CVE-2016-3373
Windows Kernel Local Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-6706
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example a crash outcome might be achieved by an attacker who is … |
HIGH | ExploitDB | 17% | — |
|
CVE-2016-3237
Kerberos Security Feature Bypass Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1120
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1121
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1122
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1123
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2019-1128
DirectWrite Remote Code Execution Vulnerability |
HIGH | ExploitDB | 17% | |
|
CVE-2017-8535
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-8536
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-8537
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-0060
Windows GDI Information Disclosure Vulnerability |
HIGH | ExploitDB | 16% |
Exploits aggregated from ExploitDB, Nuclei, Metasploit and GitHub PoCs, mapped to the CVEs Scout indexes. For defensive research and exposure testing only.