Arsenal public

Exploits

868 CVE indexées ont un exploit public prêt à l'emploi, dont 108 au KEV CISA et 326 touchant une app suivie.

CVE avec exploit: 868
Exploits recensés: 1 031
Au KEV CISA: 108
Sur le parc suivi: 326

Toutes sources ExploitDB982 Nuclei49 KEV Parc suivi

CVE	Sévérité	Sources	EPSS	Apps
CVE-2025-24514 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annot…	HIGH	ExploitDB Nuclei	33%	—
CVE-2016-1960 Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x …	HIGH	ExploitDB	31%
CVE-2025-26633 KEV Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.	HIGH	ExploitDB	30%	Windows
CVE-2016-7182 Graphics Component Font Parsing Elevation of Privilege Vulnerability	HIGH	ExploitDB	30%	Windows
CVE-2025-50154 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	30%	Windows
CVE-2019-1405 KEV An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM obje…	HIGH	ExploitDB	30%	Windows
CVE-2019-9810 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buf…	HIGH	ExploitDB	30%
CVE-2016-0016 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold …	HIGH	ExploitDB	30%	Windows
CVE-2024-38193 KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH	ExploitDB	29%	Windows
CVE-2016-3324 Internet Explorer Memory Corruption Vulnerability	HIGH	ExploitDB	28%	—
CVE-2025-11001 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe…	HIGH	ExploitDB	27%
CVE-2025-30397 KEV Scripting Engine Memory Corruption Vulnerability	HIGH	ExploitDB	27%	Windows
CVE-2018-8269 OData Denial of Service Vulnerability	HIGH	ExploitDB	27%	—
CVE-2024-49138 KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH	ExploitDB	26%	Windows
CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.	HIGH	ExploitDB	26%	—
CVE-2019-0572 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH	ExploitDB	25%	Windows
CVE-2017-11906 Internet Explorer Information Disclosure Vulnerability	HIGH	ExploitDB	25%	—
CVE-2021-3560 KEV It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the…	HIGH	ExploitDB	24%	—
CVE-2019-1117 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2019-1118 DirectWrite Remote Code Execution Vulnerability	HIGH	ExploitDB	24%	Windows
CVE-2018-8527 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2018-8532 SQL Server Management Studio Information Disclosure Vulnerability	HIGH	ExploitDB	23%	—
CVE-2017-0118 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2024-21320 Windows Themes Spoofing Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-8683 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH	ExploitDB	23%	Windows
CVE-2017-0085 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0091 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0092 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0111 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0112 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0113 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0114 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0115 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0116 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0117 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0119 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0122 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0123 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0124 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0125 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0126 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0127 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-0128 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2017-8550 Skype for Business Remote Code Execution Vulnerability	HIGH	ExploitDB	22%	—
CVE-2026-2441 KEV Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbo…	HIGH	ExploitDB	22%
CVE-2017-0120 Windows Uniscribe Information Disclosure Vulnerability	HIGH	ExploitDB	22%	—
CVE-2025-47166 Microsoft SharePoint Server Remote Code Execution Vulnerability	HIGH	ExploitDB	21%	—
CVE-2018-0878 Windows Remote Assistance Information Disclosure Vulnerability	HIGH	ExploitDB	21%	Windows
CVE-2016-3223 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win…	HIGH	ExploitDB	21%	Windows

Exploits agrégés depuis ExploitDB, Nuclei, Metasploit et les PoC GitHub, mappés aux CVE que Scout indexe. À des fins de recherche défensive et de test d'exposition uniquement.