CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12654 · Red Hat 19885 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 29| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Apple Multiple Products Out-of-Bounds Write Vulnerability CVE-2026-86950 · CISA Known Exploited Vulnerabilities, GitHub advisories, NVD | vulnerability 3 | high | 8.8 | 2026-09-28 |
| Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 7.5 / 8.8 | 2026-06-01 |
| BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-59822 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.2 | 2026-07-08 |
| Linux Kernel Unspecified Vulnerability CVE-2026-53362 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 7.8 | 2026-06-21 |
| MLflow Server-Side Request Forgery Vulnerability CVE-2026-64849 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.5 | 2026-08-17 |
| Ray-Project Ray Code Injection Vulnerability CVE-2025-62593 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8.8 | 2025-11-26 |
| Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CVE-2026-34486 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 7.5 | 2026-04-09 |
| Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 9.6 | 2026-06-08 |
| BerriAI LiteLLM Command Injection Vulnerability CVE-2026-42271 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.8 | 2026-05-08 |
| Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability CVE-2026-31431 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules | vulnerability 2 exploit 1 | high | 7.8 | 2026-04-22 |
| Apache ActiveMQ Improper Input Validation Vulnerability CVE-2026-34197 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules | vulnerability 2 exploit 1 | high | 8.8 | 2026-04-07 |
| Google Dawn Use-After-Free Vulnerability CVE-2026-5281 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 9 | 2026-03-31 |
| Apple Multiple Products Buffer Overflow Vulnerability CVE-2025-31277 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8.8 | 2025-07-30 |
| Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability CVE-2026-3910 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.8 | 2026-03-12 |
| Google Skia Out-of-Bounds Write Vulnerability CVE-2026-3909 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.8 | 2026-03-12 |
| Apple Multiple products Use-After-Free Vulnerability CVE-2023-43000 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8.8 | 2025-11-05 |
| Google Chromium CSS Use-After-Free Vulnerability CVE-2026-2441 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB | vulnerability 2 exploit 1 | high | 8.8 | 2026-02-13 |
| React Native Community CLI OS Command Injection Vulnerability CVE-2025-11953 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.1 | 2025-11-03 |
| Prettier eslint-config-prettier Embedded Malicious Code Vulnerability CVE-2025-54313 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 7.5 | 2025-07-19 |
| Apple Multiple Products Use-After-Free WebKit Vulnerability CVE-2025-43529 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8.8 | 2025-12-15 |
| Google Chromium Out of Bounds Memory Access Vulnerability CVE-2025-14174 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8.8 | 2025-12-12 |
| Google Chromium V8 Type Confusion Vulnerability CVE-2025-13223 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 8.8 | 2025-11-17 |
| Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CVE-2025-41244 · CISA Known Exploited Vulnerabilities, Red Hat | vulnerability 2 | high | 7.8 | 2025-09-29 |
| Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | high | 7.8 | 2025-06-30 |
| Git Link Following Vulnerability CVE-2025-48384 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 8 | 2025-07-08 |
Facets
Source 98717 of 98717 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22689
zetlyn/cve-nvd19161
zetlyn/cve-ghsa5730
zetlyn/cve-kev1731
Severity 26070 of 98717 claims
high7071
Exploited 1731 of 98717 claims
yes1731
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10