CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 170| Thing | Type | Platform | Date |
|---|---|---|---|
| Windows Capcom.sys Kernel Execution Exploit (x64 only) · Metasploit exploit modules · matched kernel | — | Windows | 1999-01-01 |
| Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation CVE-2025-7771 · Exploit-DB · matched kernel | local | windows | 2026-04-22 |
| Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei) CVE-2013-1300 · Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows_x86 | 2013-12-01 |
| Microsoft Windows Kernel - Information Disclosure CVE-2019-1125 · Exploit-DB · matched kernel | local | windows | 2020-01-27 |
| Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes CVE-2024-30038 · Metasploit exploit modules · matched kernel | — | Windows | 2024-06-11 |
| Microsoft Windows Race Condition Vulnerability CVE-2025-62215 · CISA Known Exploited Vulnerabilities, Exploit-DB · matched kernel | local | windows | 2025-11-12 |
| Dell dbutil Driver Insufficient Access Control Vulnerability CVE-2021-21551 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2021-05-04 |
| G Data TotalCare 2011 - Local Kernel · Exploit-DB · matched kernel | local | windows | 2010-11-08 |
| Microsoft Win32k Privilege Escalation Vulnerability CVE-2015-1701 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2015-05-12 |
| Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CVE-2024-21338 · CISA Known Exploited Vulnerabilities, Exploit-DB · matched kernel | local | windows | 2024-03-04 |
| MQAC.sys Arbitrary Write Privilege Escalation CVE-2014-4971 · Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows / windows_x86 | 2014-07-18 |
| Windows 11 22h2 - Kernel Privilege Elevation CVE-2023-28293 · Exploit-DB · matched kernel | local | windows | 2023-06-26 |
| Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-1458 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2019-12-10 |
| Microsoft Windows Kernel - '.ANI' File Parsing Crash CVE-2004-1305 · Exploit-DB · matched kernel | dos | windows | 2004-12-25 |
| Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability CVE-2024-35250 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2024-06-11 |
| Microsoft Windows Kernel - Bitmap Use-After-Free CVE-2016-0094 · Exploit-DB · matched kernel | dos | windows | 2016-04-01 |
| Novell Client 2 SP3 nicm.sys Local Privilege Escalation CVE-2013-3956 · Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows / windows_x86 | 2013-05-22 |
| DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM CVE-2011-0513 · Exploit-DB · matched kernel | local | windows | 2011-01-11 |
| PXE Exploit Server · Metasploit exploit modules · matched kernel | — | Windows | 2011-08-05 |
| Symantec AntiVirus - IOCTL Kernel Privilege Escalation (1) CVE-2006-4927 · Exploit-DB · matched kernel | local | windows | 2006-08-26 |
| Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability CVE-2011-2005 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2011-11-30 |
| Microsoft SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB · matched kernel | dos | Windows / windows | 2020-03-12 |
| DESlock+ < 3.2.7 - Local Kernel Overflow (PoC) CVE-2008-1141 · Exploit-DB · matched kernel | dos | windows | 2008-02-18 |
| Microsoft Remote Desktop Services Remote Code Execution Vulnerability CVE-2019-0708 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | dos | Windows / windows / windows_x86 | 2019-05-14 |
| Microsoft Windows - 'nt!NtNotifyChangeDirectoryFile' Kernel Pool Memory Disclosure CVE-2017-0299 · Exploit-DB · matched kernel | dos | windows | 2017-06-21 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10