Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-75333 | Not specified | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-75328 | Not specified | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-75133 | Not specified | 7.5high | under 1% · top 76% | — | — | |
| CVE-2026-75124 | Not specified | 7.5high | under 1% · top 60% | — | — | |
| CVE-2026-75035 | Not specified | 7.7high | under 1% · top 90% | — | — | |
| CVE-2026-75033 | Not specified | 7.7high | under 1% · top 89% | — | — | |
| CVE-2026-75005 | Apache Apisix | 7.5high | under 1% · top 45% | — | — | |
| CVE-2026-74982 | Mozilla Firefox | 7.5high | under 1% · top 76% | — | — | |
| CVE-2026-74977 | Mozilla Firefox | 7.5high | under 1% · top 72% | — | — | |
| CVE-2026-74966 | Mozilla Firefox | 7.5high | under 1% · top 83% | — | — | |
| CVE-2026-74934 | Mozilla Firefox | 7.5high | under 1% · top 95% | — | — | |
| CVE-2026-74932 | Not specified | 7.5high | under 1% · top 88% | — | — | |
| CVE-2026-74928 | Not specified | 7.5high | under 1% · top 77% | — | — | |
| CVE-2026-74906 | Not specified | 7.5high | under 1% · top 78% | — | — | |
| CVE-2026-74904 | Not specified | 7.5high | under 1% · top 71% | — | — | |
| CVE-2026-74892 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 77% | — | — | |
| CVE-2026-74888 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 94% | — | — | |
| CVE-2026-74884 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 82% | — | — | |
| CVE-2026-74882 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 97% | — | — | |
| CVE-2026-74879 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 82% | — | — | |
| CVE-2026-74874 | Jahlives Openssl Encrypt | 7.5high | under 1% · top 83% | — | — | |
| CVE-2026-74868 | Not specified | 7.5high | under 1% · top 69% | — | — | |
| CVE-2026-74848 | Apache Apisix | 7.5high | under 1% · top 52% | — | — | |
| CVE-2026-74795 | Not specified | 7.5high | under 1% · top 75% | — | — | |
| CVE-2026-74794 | Not specified | 7.5high | under 1% · top 80% | — | — |