CVE-20XX-?

Drop everything.

Critical CVEs that are confirmed exploited or very likely to be. Newest first.

1 CVEs · updated 2026-11-06 06:22 UTC

Reset all
  1. CVE-2025-59287

    Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

    Drop everything exploited Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 100% exploit odds Fix listed

A CVE is listed as major when it is critical (CVSS 9.0 or higher) and either confirmed exploited in the wild with a real chance of more, or very likely to be exploited (EPSS 40% or more).