Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-64435 | Linux Linux Kernel | 8.2high | under 1% · top 74% | — | — | |
| CVE-2026-64389 | Linux Linux Kernel | 8.2high | under 1% · top 62% | — | — | |
| CVE-2026-64380 | Linux Linux Kernel | 8.2high | under 1% · top 63% | — | — | |
| CVE-2026-63523 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-63495 | Not specified | 7.5high | under 1% · top 58% | — | — | |
| CVE-2026-63490 | Not specified | 7.5high | under 1% · top 61% | — | — | |
| CVE-2026-63464 | Not specified | 7.7high | under 1% · top 81% | — | — | |
| CVE-2026-63462 | Not specified | 7.5high | under 1% · top 60% | — | — | |
| CVE-2026-63421 | Not specified | 7.5high | under 1% · top 61% | — | — | |
| CVE-2026-63408 | Not specified | 7.5high | under 1% · top 71% | — | — | |
| CVE-2026-63312 | Nltk Nltk | 7.5high | under 1% · top 55% | — | — | |
| CVE-2026-63076 | Openssl Openssl | 7.5high | 1.4% · top 30% | — | — | |
| CVE-2026-63075 | Openssl Openssl | 7.5high | under 1% · top 60% | — | — | |
| CVE-2026-63072 | Openssl Openssl | 7.5high | under 1% · top 50% | — | — | |
| CVE-2026-63043 | Apache Inlong | 7.5high | under 1% · top 48% | — | — | |
| CVE-2026-62801 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-62762 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-6266 | Not specified | 8.3high | under 1% · top 67% | — | — | |
| CVE-2026-62571 | Oracle Hyperion Calculation Manager | 7.7high | under 1% · top 72% | — | — | |
| CVE-2026-62554 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-62552 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 75% | — | — | |
| CVE-2026-62550 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-62545 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 80% | — | — | |
| CVE-2026-62481 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 81% | — | — | |
| CVE-2026-62467 | Oracle Hyperion Infrastructure Technology | 7.7high | under 1% · top 72% | — | — |