|
CVE-2025-32975
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
Salt Typhoon
|
|
CVE-2026-32475
|
CRITICAL
|
9.0
|
|
KEV
PoC
|
StopAndProtect
|
|
CVE-2026-0768
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
unknown threat actors
|
|
CVE-2025-53521
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
PoisonedRefresh
Unknown / Unattributed
|
|
CVE-2026-11645
|
HIGH
|
8.8
|
|
KEV
PoC
|
Lazarus Group
|
|
CVE-2026-75650
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
Unattributed Threat Actor
Unknown/Nation-agnostic
|
|
CVE-2025-40602
|
MEDIUM
|
6.6
|
|
KEV
Weaponized
|
UNC3886
UNC5221
|
|
CVE-2025-21043
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2013-2981
|
MEDIUM
|
—
|
|
|
Dort
|
|
CVE-2025-21590
|
MEDIUM
|
4.4
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2025-48595
|
HIGH
|
8.4
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-58231
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
BianLian
CL-STA-0048
RansomExx
UNC5174
UNC5221
|
|
CVE-2025-48700
|
MEDIUM
|
6.1
|
|
KEV
PoC
|
Salt Typhoon
|
|
CVE-2026-50746
|
CRITICAL
|
10.0
|
|
|
Russian state-sponsored threat actors
|
|
CVE-2026-8452
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2024-1234
|
MEDIUM
|
6.4
|
|
|
APT29
Coupang
Evil Corp
FulcrumSec
LockBit
TeamPCP
UAT-10147
|
|
CVE-2026-16812
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
Unknown/Unattributed
|
|
CVE-2026-69836
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
Lazarus Group
Unknown Adversary (ESP)
|
|
CVE-2025-31277
|
HIGH
|
8.8
|
|
KEV
PoC
|
Boggy Serpens
DarkSword
Hezb
Mimo
MuddyWater
UNC6353
UNC6748
|
|
CVE-2024-23225
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2026-85046
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT31
APT31 / Violet Typhoon
|
|
CVE-2026-54420
|
HIGH
|
8.5
|
|
KEV
PoC
|
APT29
|
|
CVE-2024-21886
|
HIGH
|
7.8
|
|
|
DeadLock
|
|
CVE-2024-23296
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2023-41974
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2023-41990
|
HIGH
|
7.8
|
|
KEV
Weaponized
|
Operation Triangulation (original developers)
|
|
CVE-2026-45585
|
MEDIUM
|
6.8
|
|
|
Nightmare Eclipse
|
|
CVE-2026-20700
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6748
|
|
CVE-2025-38352
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2025-59374
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT
|
|
CVE-2026-7473
|
MEDIUM
|
5.8
|
|
KEV
Weaponized
|
Lazarus Group
|
|
CVE-2021-1048
|
HIGH
|
7.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2025-27038
|
HIGH
|
7.5
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-5426
|
CRITICAL
|
9.1
|
|
KEV
PoC
|
APT41
Ghostwriter
|
|
CVE-2026-87491
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT31 / Violet Typhoon
Unknown APT
|
|
CVE-2026-4415
|
HIGH
|
8.1
|
|
|
Nightmare Eclipse
|
|
CVE-2023-33106
|
HIGH
|
8.4
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-42018
|
HIGH
|
7.5
|
|
KEV
PoC
|
Unknown (Commercial/Cybercriminal)
|
|
CVE-2026-42016
|
HIGH
|
8.1
|
|
KEV
PoC
|
Unknown (Commercial/Cybercriminal)
Unknown/Nation-agnostic
|
|
CVE-2023-43010
|
HIGH
|
8.8
|
|
|
Operation Zero
Star Blizzard
|
|
CVE-2024-4610
|
HIGH
|
7.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-4681
|
UNKNOWN
|
—
|
|
|
Sandworm
|
|
CVE-2026-86218
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Adversaries
|
|
CVE-2024-36190
|
MEDIUM
|
5.4
|
|
|
Laundry Bear
|
|
CVE-2026-81963
|
HIGH
|
7.8
|
|
KEV
PoC
|
Unknown/Ransomware Groups
|
|
CVE-2026-40361
|
HIGH
|
8.4
|
|
|
APT28
|
|
CVE-2026-3452
|
HIGH
|
7.2
|
|
|
Ababil of Minab
|
|
CVE-2026-85880
|
HIGH
|
7.8
|
|
KEV
PoC
|
APT31
APT31 / Violet Typhoon
Unknown
|
|
CVE-2026-69414
|
HIGH
|
7.8
|
|
|
Nightmare Eclipse
|
|
CVE-2025-48543
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
UNC3886
UNC5221
|