Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-66907 | Apache Camel | 7.5high | under 1% · top 54% | — | — | |
| CVE-2026-66878 | Not specified | 7.7high | under 1% · top 80% | — | — | |
| CVE-2026-66840 | Not specified | 7.5high | under 1% · top 82% | — | — | |
| CVE-2026-66816 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-66766 | Not specified | 7.5high | under 1% · top 78% | — | — | |
| CVE-2026-66585 | Not specified | 7.5high | under 1% · top 84% | — | — | |
| CVE-2026-66393 | Nltk Nltk | 7.5high | under 1% · top 70% | — | — | |
| CVE-2026-66308 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-66306 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-66303 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-66155 | Not specified | 7.6high | under 1% · top 93% | — | — | |
| CVE-2026-65927 | Apache Tomcat | 7.5high | under 1% · top 46% | — | — | |
| CVE-2026-65822 | Not specified | 7.6high | under 1% · top 82% | — | — | |
| CVE-2026-65644 | Rocket.Chat Rocket.Chat | 7.5high | under 1% · top 79% | — | — | |
| CVE-2026-65412 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-65395 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-65370 | Apple Servicetalk | 7.5high | under 1% · top 89% | — | — | |
| CVE-2026-65365 | Apple Macos | 6.5medium | Not scored | — | — | |
| CVE-2026-65343 | Apple Ipados | 7.5high | under 1% · top 69% | — | — | |
| CVE-2026-65097 | Nvidia Nemoclaw | 7.5high | under 1% · top 87% | — | — | |
| CVE-2026-64918 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-6484 | Not specified | 8.2high | under 1% · top 96% | — | — | |
| CVE-2026-64773 | Apple Container | 7.5high | under 1% · top 76% | — | — | |
| CVE-2026-64753 | Apple Safari | 6.5medium | Not scored | — | — | |
| CVE-2026-64448 | Linux Linux Kernel | 8.2high | under 1% · top 61% | — | — |