Arsenal public
Exploits
868 CVE indexées ont un exploit public prêt à l'emploi, dont 108 au KEV CISA et 326 touchant une app suivie.
- CVE avec exploit
- 868
- Exploits recensés
- 1 031
- Au KEV CISA
- 108
- Sur le parc suivi
- 326
| CVE | Sévérité | Sources | EPSS | Apps |
|---|---|---|---|---|
|
CVE-2017-8535
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-8536
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-8537
Microsoft Malware Protection Engine Denial of Service Vulnerability |
HIGH | ExploitDB | 17% | — |
|
CVE-2017-0060
Windows GDI Information Disclosure Vulnerability |
HIGH | ExploitDB | 16% | |
|
CVE-2019-0571
Windows Data Sharing Service Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 16% | |
|
CVE-2018-8463
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer san… |
HIGH | ExploitDB | 15% | |
|
CVE-2018-8469
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer san… |
HIGH | ExploitDB | 15% | |
|
CVE-2019-1019
Microsoft Windows Security Feature Bypass Vulnerability |
HIGH | ExploitDB | 15% | |
|
CVE-2018-0744
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 15% | |
|
CVE-2019-1347
Windows Denial of Service Vulnerability |
HIGH | ExploitDB | 15% | |
|
CVE-2025-27210
Microsoft Security Update Guide entry — NVD enrichira. |
HIGH | ExploitDB | 15% | — |
|
CVE-2017-0211
Windows OLE Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 14% | |
|
CVE-2016-0165
KEV
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se… |
HIGH | ExploitDB | 14% | |
|
CVE-2017-10661
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 13% | |
|
CVE-2019-1245
DirectWrite Information Disclosure Vulnerability |
HIGH | ExploitDB | 13% | |
|
CVE-2016-3376
Win32k Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 13% | |
|
CVE-2019-1244
DirectWrite Information Disclosure Vulnerability |
HIGH | ExploitDB | 12% | |
|
CVE-2018-8468
Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 12% | |
|
CVE-2019-1253
KEV
Windows Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 12% | |
|
CVE-2016-0070
Windows Kernel Local Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 11% | |
|
CVE-2016-9651
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote at… |
HIGH | ExploitDB | 11% | |
|
CVE-2016-8655
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 11% | |
|
CVE-2019-1343
Windows Denial of Service Vulnerability |
HIGH | ExploitDB | 11% | |
|
CVE-2019-1346
Windows Denial of Service Vulnerability |
HIGH | ExploitDB | 11% | |
|
CVE-2017-0263
KEV
Win32k Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 10% | |
|
CVE-2025-21333
KEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 10% | |
|
CVE-2019-1132
KEV
Win32k Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 10% | — |
|
CVE-2019-11706
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing c… |
HIGH | ExploitDB | 10% | |
|
CVE-2017-0259
Windows Kernel Information Disclosure Vulnerability |
HIGH | ExploitDB | 10% | |
|
CVE-2026-46300
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing … |
HIGH | ExploitDB | 9% | — |
|
CVE-2019-5789
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote … |
HIGH | ExploitDB | 9% | |
|
CVE-2025-2783
KEV
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remo… |
HIGH | ExploitDB | 9% | |
|
CVE-2018-6092
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute… |
HIGH | ExploitDB | 9% | |
|
CVE-2019-5788
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a rem… |
HIGH | ExploitDB | 9% | |
|
CVE-2023-33145
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
HIGH | ExploitDB | 9% | — |
|
CVE-2018-1038
Windows Kernel Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 9% | — |
|
CVE-2014-8393
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusi… |
HIGH | ExploitDB | 8% | — |
|
CVE-2017-13262
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 8% | |
|
CVE-2017-0245
Win32k Information Disclosure Vulnerability |
HIGH | ExploitDB | 8% | — |
|
CVE-2017-0569
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 8% | |
|
CVE-2018-6126
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory wri… |
HIGH | ExploitDB | 8% | |
|
CVE-2020-0683
KEV
Windows Installer Elevation of Privilege Vulnerability |
HIGH | ExploitDB | 8% | |
|
CVE-2017-0220
Windows Kernel Information Disclosure Vulnerability |
HIGH | ExploitDB | 7% | — |
|
CVE-2019-9813
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary mem… |
HIGH | ExploitDB | 7% | |
|
CVE-2017-0258
Windows Kernel Information Disclosure Vulnerability |
HIGH | ExploitDB | 7% | |
|
CVE-2017-13260
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 7% | |
|
CVE-2017-13261
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 7% | |
|
CVE-2017-13258
Indexed via Android Security Bulletin — full NVD metadata pending. |
HIGH | ExploitDB | 7% | |
|
CVE-2017-0175
Windows Kernel Information Disclosure Vulnerability |
HIGH | ExploitDB | 7% | — |
|
CVE-2018-6064
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker … |
HIGH | ExploitDB | 7% |
Exploits agrégés depuis ExploitDB, Nuclei, Metasploit et les PoC GitHub, mappés aux CVE que Scout indexe. À des fins de recherche défensive et de test d'exposition uniquement.