LIVE
Confirmed 0-Day Vulnerabilities
Curated inventory of in-the-wild exploited CVEs, triaged from multiple threat intelligence sources and cross-referenced with Google Project Zero.
Total Confirmed
636
0-day CVEs
This Month
3
newly confirmed
Project Zero
401
in Google P0 sheet
Articles Indexed
14505
from all sources
Recent Confirmed 0-Days
View all →| CVE ID | Vendor / Product | Weakness | CVSS | Conf. | Mentions | Published |
|---|---|---|---|---|---|---|
|
Microsoft
Exchange
|
CWE-79
Cross-site Scripting
|
8.1
v3
|
95% | 21 | May 14, 2026 | |
|
Google
Chrome
|
CWE-416
Use After Free
|
8.8
v3
|
95% | 8 | Apr 01, 2026 | |
|
Qualcomm
GPU
|
CWE-190
Integer Overflow
|
7.8
v3
|
92% | 18 | Mar 02, 2026 | |
|
Cisco
Cisco Catalyst SD-WAN Manager
|
CWE-287
Improper Authentication
|
10.0
v3
|
92% | 33 | Feb 25, 2026 | |
|
Microsoft
Office
|
CWE-807
Reliance on Untrusted Inputs
|
7.8
v3
|
92% | 9 | Feb 10, 2026 | |
|
Cisco
Cisco Unified Communications Manager
|
CWE-94
Code Injection
|
8.2
v3
|
85% | 4 | Jan 21, 2026 | |
|
QNAP Systems Inc.
Malware Remover
|
CWE-94
Code Injection
|
8.1
v4
|
85% | 1 | Jan 02, 2026 | |
|
SmarterTools
SmarterMail
|
— |
10.0
v3
|
82% | 4 | Dec 29, 2025 | |
|
Gogs
Gogs
|
CWE-22
Path Traversal
|
8.7
v4
|
95% | 4 | Dec 10, 2025 | |
|
Microsoft
Windows
|
CWE-416
Use After Free
|
7.8
v3
|
92% | 5 | Dec 09, 2025 |
Last update: July 14, 2026 08:02 UTC