CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 54m agofresh within 24h

freeSign in 20878 claims are newer than 30 days and need a subscription

65,940things

8,540named by two sources or more

960conflicts

7sources

Only one source knows: Exploit-DB 23131 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12667 · Red Hat 19884 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.

Compared · what is held against what, and from which column of each source

Property	CISA Known Exploited Vulnerabilities	Red Hat	NVD	GitHub advisories	Metasploit exploit modules	Exploit-DB	Write-ups
Cvss	not said	`cvss3_score`	`cve.metrics.cvssMetricV31[].cvssData.baseScore`	`cvss.score`	not said	not said	not said
Exploited	`const:yes`	not said	not said	not said	not said	not said	not said
Severity	not said	`severity`	not said	`severity`	not said	not said	not said

Everything else the sources say is shown side by side, and not compared.

Everything Exploited, and severe article 10 exploit 49396vulnerability 49311

Found

25 things, from 11,084 claims

Thing	Kind	Severity	Cvss	Date
Linux Kernel Integer Overflow Vulnerability CVE-2013-2596 · CISA Known Exploited Vulnerabilities · matched kernel	vulnerability 1	—	—	2022-09-15
kernel: Linux kernel: ublk race condition causes kernel crash CVE-2025-37906 · Red Hat · matched kernel	vulnerability 1	medium	4.1	2025-05-20
Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) CVE-2025-36940 · NVD · matched kernel	vulnerability 1	—	8.8	2026-08-24
Linux Kernel Improper Input Validation Vulnerability CVE-2013-6282 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel	vulnerability 1 exploit 3	—	—	2013-09-06
Linux Kernel Unspecified Vulnerability CVE-2026-53362 · CISA Known Exploited Vulnerabilities, Red Hat · matched kernel	vulnerability 2	high	7.8	2026-06-21
Memory corruption when accessing resources in kernel driver. CVE-2025-47393 · NVD · matched kernel	vulnerability 1	—	7.8	2026-01-07
Linux Kernel Privilege Escalation Vulnerability CVE-2021-3493 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel	vulnerability 1 exploit 1	—	—	2021-04-12
kernel: Linux kernel: IMA memory leak CVE-2022-50577 · Red Hat · matched kernel	vulnerability 1	low	5.5	2025-10-22
In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko [1] we need to use access_ok to check the user space data bounds before we use __get-user to get it. [1] https://lore.kernel.org/bpf/20260610145235.CB1441F00893@smtp.kernel.org/ CVE-2026-74258 · NVD, Red Hat · matched kernel	vulnerability 2	medium	5.5 / 7.8	2026-08-15
Linux Kernel Improper Privilege Management Vulnerability CVE-2019-13272 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel	vulnerability 1 exploit 5	—	—	2019-07-04
kernel: Kernel: Bluetooth HCI local DoS CVE-2024-58241 · Red Hat · matched kernel	vulnerability 1	medium	4.4	2025-09-24
In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsr_init_skb() to allocate larger skb for RedBox case. Indeed, send_hsr_supervision_frame() will add two additional components (struct hsr_sup_tlv and struct hsr_sup_payload) syzbot reported the following crash: skbuff: skb_over_panic: text:ffffffff8afd4b0a len:34 put:6 head:ffff88802ad29e00 data:ffff88802ad29f22 tail:0x144 end:0x140 dev:gretap0 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 2 UID: 0 PID: 7611 Comm: syz-executor Not tainted 6.12.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:skb_panic+0x157/0x1d0 net/core/skbuff.c:206 Code: b6 04 01 84 c0 74 04 3c 03 7e 21 8b 4b 70 41 56 45 89 e8 48 c7 c7 a0 7d 9b 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 9a 76 79 f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 94 76 fb f8 4c RSP: 0018:ffffc90000858ab8 EFLAGS: 00010282 RAX: 0000000000000087 RBX: ffff8880598c08c0 RCX: ffffffff816d3e69 RDX: 0000000000000000 RSI: ffffffff816de786 RDI: 0000000000000005 RBP: ffffffff8c9b91c0 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000302 R11: ffffffff961cc1d0 R12: ffffffff8afd4b0a R13: 0000000000000006 R14: ffff88804b938130 R15: 0000000000000140 FS: 000055558a3d6500(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1295974ff8 CR3: 000000002ab6e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> skb_over_panic net/core/skbuff.c:211 [inline] skb_put+0x174/0x1b0 net/core/skbuff.c:2617 send_hsr_supervision_frame+0x6fa/0x9e0 net/hsr/hsr_device.c:342 hsr_proxy_announce+0x1a3/0x4a0 net/hsr/hsr_device.c:436 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1794 expire_timers kernel/time/timer.c:1845 [inline] __run_timers+0x6e8/0x930 kernel/time/timer.c:2419 __run_timer_base kernel/time/timer.c:2430 [inline] __run_timer_base kernel/time/timer.c:2423 [inline] run_timer_base+0x111/0x190 kernel/time/timer.c:2439 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2449 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 </IRQ> CVE-2024-56639 · NVD · matched kernel	vulnerability 1	—	5.5	2024-12-27
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-0986 · CISA Known Exploited Vulnerabilities · matched kernel	vulnerability 1	—	—	2021-11-03
kernel: netfs: Fix kernel async DIO CVE-2025-21643 · Red Hat · matched kernel	vulnerability 1	low	5.5	2025-01-19
A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability. CVE-2022-1199 · NVD · matched kernel	vulnerability 1	—	7.5	2022-08-29
Linux Kernel Privilege Escalation Vulnerability CVE-2014-3153 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel	vulnerability 1 exploit 2	—	—	2014-05-03
kernel: kho: skip KHO for crash kernel CVE-2026-64167 · Red Hat · matched kernel	vulnerability 1	—	—	2026-07-19
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability CVE-2025-21335 · CISA Known Exploited Vulnerabilities, NVD · matched kernel	vulnerability 2	—	7.8	2025-01-14
Microsoft Windows Kernel Information Disclosure Vulnerability CVE-2021-31955 · CISA Known Exploited Vulnerabilities · matched kernel	vulnerability 1	—	—	2021-11-03
kernel: Linux kernel: Network subsystem memory leak CVE-2023-53716 · Red Hat · matched kernel	vulnerability 1	low	5.5	2025-10-22
Memory corruption while processing shared command buffer packet between camera userspace and kernel. CVE-2025-47334 · NVD · matched kernel	vulnerability 1	—	6.7	2026-01-07
Linux Kernel Privilege Escalation Vulnerability CVE-2013-2094 · CISA Known Exploited Vulnerabilities, Exploit-DB · matched kernel	vulnerability 1 exploit 3	—	—	2013-05-14
kernel: riscv: process: fix kernel info leakage CVE-2022-49852 · Red Hat · matched kernel	vulnerability 1	—	—	2025-05-01
A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak. CVE-2023-4611 · NVD · matched kernel	vulnerability 1	—	7	2023-08-29
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2016-3309 · CISA Known Exploited Vulnerabilities, Exploit-DB · matched kernel	vulnerability 1 exploit 1	—	—	2017-10-06

Facets

Kind 98717 of 98717 claims

Source 98717 of 98717 claims

Severity 26070 of 98717 claims

Exploited 1731 of 98717 claims

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

GitHub advisories high

The ecosystem packages no distribution ships.

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.