Threat landscape

Software flaws hackers are using right now

The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.

1710
Flaws on the list
7
Added in 7 days
5
Fix deadline within 7 days
360
Used by ransomware gangs
CVEAffectedCVSSExploit oddsAddedDue
CVE-2026-66907Apache Camel7.5highunder 1% · top 54%
CVE-2026-66878Not specified7.7highunder 1% · top 80%
CVE-2026-66840Not specified7.5highunder 1% · top 82%
CVE-2026-66816Not specified6.5mediumNot scored
CVE-2026-66766Not specified7.5highunder 1% · top 78%
CVE-2026-66585Not specified7.5highunder 1% · top 84%
CVE-2026-66393Nltk Nltk7.5highunder 1% · top 70%
CVE-2026-66308Not specified6.5mediumNot scored
CVE-2026-66306Not specified6.5mediumNot scored
CVE-2026-66303Not specified6.5mediumNot scored
CVE-2026-66155Not specified7.6highunder 1% · top 93%
CVE-2026-65927Apache Tomcat7.5highunder 1% · top 46%
CVE-2026-65822Not specified7.6highunder 1% · top 82%
CVE-2026-65644Rocket.Chat Rocket.Chat7.5highunder 1% · top 79%
CVE-2026-65412Not specified6.5mediumNot scored
CVE-2026-65395Not specified6.5mediumNot scored
CVE-2026-65370Apple Servicetalk7.5highunder 1% · top 89%
CVE-2026-65365Apple Macos6.5mediumNot scored
CVE-2026-65343Apple Ipados7.5highunder 1% · top 69%
CVE-2026-65097Nvidia Nemoclaw7.5highunder 1% · top 87%
CVE-2026-64918Microsoft 365 Apps6.5mediumNot scored
CVE-2026-6484Not specified8.2highunder 1% · top 96%
CVE-2026-64773Apple Container7.5highunder 1% · top 76%
CVE-2026-64753Apple Safari6.5mediumNot scored
CVE-2026-64448Linux Linux Kernel8.2highunder 1% · top 61%
Page 343 of 789 · 19715 entriesPreviousNext