Live Threat Intelligence

Top Threats Today

The highest-risk vulnerabilities based on ThreatScoreAI® analysis of real-world exploitation data.

Highest ThreatScore CVEs

CVE-2024-3094KEVSupply Chain

XZ Utils Backdoor

Malicious code in XZ Utils affecting SSH authentication on Linux systems.

CVSS: 9.8EPSS: 0.94

ThreatScore

CVE-2021-44228KEVRemote Code Execution

Log4Shell

Critical RCE vulnerability in Apache Log4j logging library.

CVSS: 10EPSS: 0.975

ThreatScore

CVE-2023-34362KEVSQL Injection

MOVEit Transfer SQLi

SQL injection vulnerability in Progress MOVEit Transfer application.

CVSS: 9.8EPSS: 0.89

ThreatScore

CVE-2023-44487KEVDenial of Service

HTTP/2 Rapid Reset

DDoS vulnerability affecting HTTP/2 implementations.

CVSS: 7.5EPSS: 0.72

ThreatScore

CVE-2022-22965KEVRemote Code Execution

Spring4Shell

RCE vulnerability in Spring Framework for Java applications.

CVSS: 9.8EPSS: 0.81

ThreatScore

CVE-2023-23397KEVPrivilege Escalation

Outlook Elevation of Privilege

Critical vulnerability in Microsoft Outlook exploited in the wild.

CVSS: 9.8EPSS: 0.76

ThreatScore

CVE-2024-21762KEVRemote Code Execution

FortiOS Out-of-bound Write

Critical vulnerability in Fortinet FortiOS SSL VPN.

CVSS: 9.6EPSS: 0.78

ThreatScore

CVE-2023-22515KEVAuthentication Bypass

Atlassian Confluence Auth Bypass

Critical privilege escalation in Atlassian Confluence Data Center.

CVSS: 9.8EPSS: 0.74

ThreatScore

Latest KEV Additions

CVE-2024-38856

Apache OFBiz

2024-08-07

CVE-2024-38178

Microsoft Windows

2024-08-13

CVE-2024-7971

Google Chrome

2024-08-26

CVE-2024-43461

Microsoft Windows

2024-09-10

CVE-2024-40766

SonicWall SonicOS

2024-09-09

1,200+

Total KEV CVEs

94%

High/Critical

Protect Your Systems

Use ThreatScoreAI® to prioritise patching these vulnerabilities in your environment.