CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 86| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Linux BPF Sign Extension Local Privilege Escalation CVE-2017-16995 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 4 | — | — | 2017-11-12 |
| Linux Kernel Privilege Escalation Vulnerability CVE-2014-3153 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | vulnerability 1 exploit 2 | — | — | 2014-05-03 |
| Linux Nested User Namespace idmap Limit Local Privilege Escalation CVE-2018-18955 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 7 | — | — | 2018-11-15 |
| Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL pointer dereference Privilege Escalation CVE-2018-5333 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2018-11-01 |
| Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL pointer dereference Privilege Escalation CVE-2019-9213 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 3 | — | — | 2018-11-01 |
| Linux BPF doubleput UAF Privilege Escalation CVE-2016-4557 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 3 | — | — | 2016-05-04 |
| Linux Kernel Improper Ownership Management Vulnerability CVE-2023-0386 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | vulnerability 1 exploit 1 | — | — | 2023-03-22 |
| Linux Kernel Sendpage Local Privilege Escalation CVE-2009-2692 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 9 | — | — | 2009-08-13 |
| Windows Capcom.sys Kernel Execution Exploit (x64 only) · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 1999-01-01 |
| Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei) CVE-2013-1300 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 2 | — | — | 2013-12-01 |
| Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes CVE-2024-30038 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2024-06-11 |
| Linux Kernel Improper Input Validation Vulnerability CVE-2010-3904 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | vulnerability 1 exploit 3 | — | — | 2010-10-19 |
| Linux Kernel Improper Input Validation Vulnerability CVE-2013-6282 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | vulnerability 1 exploit 3 | — | — | 2013-09-06 |
| Linux eBPF ALU32 32-bit Invalid Bounds Tracking LPE CVE-2021-3490 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2021-05-11 |
| kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-46300 · Red Hat, Exploit-DB, Metasploit exploit modules · matched kernel | vulnerability 1 exploit 2 | high | 7.8 | 2026-05-13 |
| kernel: "Dirty Frag" RxRPC variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43500 · Red Hat, Exploit-DB, Metasploit exploit modules · matched kernel | vulnerability 1 exploit 3 | high | 7.8 | 2026-05-08 |
| kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43284 · Red Hat, Exploit-DB, Metasploit exploit modules · matched kernel | vulnerability 1 exploit 3 | high | 7.8 | 2026-05-07 |
| Linux Kernel 4.6.3 Netfilter Privilege Escalation CVE-2016-4997 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 3 | — | — | 2016-06-03 |
| Linux Kernel 4.6.3 Netfilter Privilege Escalation CVE-2016-4998 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2016-06-03 |
| AF_PACKET packet_set_ring Privilege Escalation CVE-2017-7308 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 4 | — | — | 2017-03-29 |
| GameOver(lay) Privilege Escalation and Container Escape CVE-2023-32629 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2023-07-26 |
| GameOver(lay) Privilege Escalation and Container Escape CVE-2023-2640 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2023-07-26 |
| Rootkit Privilege Escalation Signal Hunter · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2013-11-07 |
| Apple OS X Heap-Based Buffer Overflow Vulnerability CVE-2014-4404 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | vulnerability 1 exploit 2 | — | — | 2014-09-24 |
| io_uring Same Type Object Reuse Priv Esc CVE-2022-1043 · Metasploit exploit modules · matched kernel | exploit 1 | — | — | 2022-03-22 |
Facets
Source 99154 of 99154 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22719
zetlyn/cve-nvd19380
zetlyn/cve-ghsa5916
zetlyn/cve-kev1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10