⌂

🐞 CVE Tracking and Search

Search and filter Common Vulnerabilities and Exposures

About this page

Every CVE mentioned in the news ThreatFeed reads, with its severity, how likely it is to be exploited (EPSS), whether it is on CISA's Known Exploited Vulnerabilities list, and any public exploit code in Metasploit or ExploitDB. Use it to find the vulnerabilities being exploited or talked about now: search by CVE or keyword, and narrow by time window, severity or source. Each CVE has an AI action plan: patch now, mitigate or watch.

🔎 Search & Filters Clear All
Search: Time Range:
Sources:
📚 Intelligence Coverage the corpus behind every search on this page
387,824+
CVEs Tracked
387,824
Exploit Intel
369,032
EPSS Scored
5,524
CISA KEV
2,722
Metasploit Modules
30,393
ExploitDB Entries
61
MITRE ATT&CK Maps
🚨 Exploitation Status within the current filter · click a card to jump to it
0
Actively Exploited
0
CISA KEV
0
PoC Available
0
Zero-Days
0
Recent Discoveries
1
Most Mentioned
📊 CVE Severity Distribution last 30 days
🐞 Results 1 CVEs in the last 30 days
CVE-2026-111497 CRITICAL CVSS: 9.8 EPSS: 82.6% VulnCheck KEV Weaponized MOST MENTIONED (6 articles) CWE-252 CWE-787 T1203
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Published: 2026-10-22
Mentioned in 6 article(s):
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The Hacker News
CVE-2026-111497 - Google Brotli Unchecked Return Value Vulnerability
Recent KEV Entries
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
The Hacker News
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
MSRC Security Update Guide
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
The Hacker News