CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23131 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12667 · Red Hat 19884 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 4,458| Thing | Type | Platform | Date |
|---|---|---|---|
| Microsoft Edge 150.0.4078.48 - RCE CVE-2026-58289 · Exploit-DB | local | multiple | 2026-08-10 |
| ProtonVPN v4.4.1 - Unquoted Service Path · Exploit-DB | local | windows | 2026-07-07 |
| MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation CVE-2026-36213 · Exploit-DB | local | windows | 2026-07-06 |
| Windows Defender (MsMpEng.exe) - Race Condition · Exploit-DB | local | windows | 2026-07-06 |
| ImageMagick: ImageMagick: Denial of Service via crafted MIFF file CVE-2026-46522 · Red Hat, Exploit-DB | local | multiple | 2026-05-29 |
| ZTE ZXHN H188A V6 - Authentication Bypass CVE-2026-34472 · Exploit-DB | local | multiple | 2026-05-29 |
| ZTE Routers - Unauthenticated Denial of Service CVE-2026-34473 · Exploit-DB | local | multiple | 2026-05-29 |
| ZTE H298A / H108N - Unauthenticated Credential Exposure CVE-2026-34474 · Exploit-DB | local | multiple | 2026-05-29 |
| kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-46300 · Red Hat, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2026-05-13 |
| kernel: "Dirty Frag" RxRPC variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43500 · Red Hat, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2026-05-08 |
| kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43284 · Red Hat, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2026-05-07 |
| Realtek rtl819x - Local Privilege CVE-2026-36355 · Exploit-DB | local | linux | 2026-05-27 |
| Linux Kernel 6.8 - Local Privilege Escalation · Exploit-DB | local | linux | 2026-05-26 |
| Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path · Exploit-DB | local | windows | 2026-05-21 |
| Windows Snipping Tool - NTLMv2 Hash Hijack CVE-2026-33829 · Exploit-DB | local | windows | 2026-05-15 |
| Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution · Exploit-DB | local | windows | 2026-05-15 |
| Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing · Exploit-DB | local | windows | 2026-05-15 |
| NocoBase 2.0.27 - VM Sandbox Escape CVE-2026-34156 · Exploit-DB | local | multiple | 2026-05-07 |
| kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() CVE-2026-23231 · Red Hat, Exploit-DB | local | linux | 2026-03-04 |
| Windows 11 24H2 - Local Privilege Escalation CVE-2026-21250 · Exploit-DB | local | windows | 2026-05-04 |
| kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. CVE-2025-40271 · Red Hat, Exploit-DB | local | linux | 2025-12-06 |
| Windows 11 25H2 - Heap Overflow CVE-2026-21248 · Exploit-DB | local | windows | 2026-04-30 |
| Windows 11 25H2 - Heap Overflow CVE-2026-21244 · Exploit-DB | local | windows | 2026-04-30 |
| Windows 11 23H2 - Denial of Service (DoS) CVE-2025-47987 · Exploit-DB | local | windows | 2026-04-30 |
| Google Chromium CSS Use-After-Free Vulnerability CVE-2026-2441 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB | local | multiple | 2026-02-13 |
Facets
Type 46698 of 98717 claims
local4879
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10