Live tracker of exploited and high-impact vulnerabilities
New vulnerabilities from CERTs, vendors, researchers and newsrooms in 180+ countries, checked automatically, with how widely each one is being exploited, warned about and covered.
Panic meter
ConnectingReading the room
- Researchers talking
- –
- News outlets covering
- –
- CERTs and agencies warning
- –
Distinct people and organisations discussing new vulnerabilities in the past 24 hours.
Trending now
Outbreak map
- Countries in the news
- –
- Agencies warning
- –
- Countries warned
- –
- Patient zero
- –
Daily panic
Vulnerabilities
Apple vulnerabilities
Every Apple vulnerability Vulnocalypse is tracking, newest first: whether it’s being exploited, which CERTs have warned about it and how widely it’s covered. Subscribe with the RSS feed for Apple alerts.
- 73impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 8.8 - 66impact
Apple iOS/macOS: A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 6.3 - 74impact
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 8.8 - 36impact
Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems
0 news outlets0 CERTs0 researchersCVSS 5.3 - 51impact
Apple iOS/macOS: Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att
0 news outlets0 CERTs0 researchersCVSS 9.6 - 31impact
Magic Keyboard Firmware Update 2.0.6
0 news outlets0 CERTs0 researchersCVSS 2.4 - 37impact
Apple iOS/macOS: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS M
0 news outlets0 CERTs0 researchersCVSS 6.2 - 38impact
Apple iOS/macOS: An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPad
0 news outlets0 CERTs0 researchersCVSS 6.5 - 38impact
Apple iOS/macOS: A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS So
0 news outlets0 CERTs0 researchersCVSS 6.2 - 46impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5,
0 news outlets0 CERTs0 researchersCVSS 8.8 - 38impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and
0 news outlets0 CERTs0 researchersCVSS 7.8 - 44impact
Apple iOS/macOS: A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS So
0 news outlets0 CERTs0 researchersCVSS 7.3 - 41impact
Apple iOS/macOS: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. Thi
0 news outlets0 CERTs0 researchersCVSS 5.9 - 31impact
Apple iOS/macOS: An issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS
0 news outlets0 CERTs0 researchersCVSS 5.5 - 43impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.
0 news outlets0 CERTs0 researchersCVSS 7.8 - 30impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 1
0 news outlets0 CERTs0 researchersCVSS 5.8 - 24impact
Apple iOS/macOS: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17
0 news outlets0 CERTs0 researchersCVSS 3.3 - 25impact
Apple iOS/macOS: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3
0 news outlets0 CERTs0 researchersCVSS 3.3 - 31impact
Apple iOS/macOS: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17
0 news outlets0 CERTs0 researchersCVSS 5.5 - 25impact
Apple iOS/macOS: A privacy issue was addressed with improved handling of user preferences. This issue is fixed in Safari 17.3, iOS 16.7.5
0 news outlets0 CERTs0 researchersCVSS 3.3 - 47impact
Apple iOS/macOS: The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.
0 news outlets0 CERTs0 researchersCVSS 7.5 - 32impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS V
0 news outlets0 CERTs0 researchersCVSS 5.5 - 31impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 an
0 news outlets0 CERTs0 researchersCVSS 5.5 - 30impact
Apple iOS/macOS: This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, i
0 news outlets0 CERTs0 researchersCVSS 5.5 - 30impact
Apple iOS/macOS: An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A loc
0 news outlets0 CERTs0 researchersCVSS 5.5 - 32impact
Apple iOS/macOS: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS S
0 news outlets0 CERTs0 researchersCVSS 6.3 - 31impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may
0 news outlets0 CERTs0 researchersCVSS 5.5 - 44impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3. Processing web content
0 news outlets0 CERTs0 researchersCVSS 8.8 - 46impact
Apple iOS/macOS: The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.
0 news outlets0 CERTs0 researchersCVSS 7.5 - 45impact
Apple iOS/macOS: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iP
0 news outlets0 CERTs0 researchersCVSS 8.8 - 73impact
Apple iOS/macOS: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 8.8 - 66impact
Apple iOS/macOS: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2,
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 6.5 - 37impact
Apple iOS/macOS: The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Pro
0 news outlets0 CERTs0 researchersCVSS 6.2 - 28impact
Apple iOS/macOS: This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Note
0 news outlets0 CERTs0 researchersCVSS 4.3 - 37impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 1
0 news outlets0 CERTs0 researchersCVSS 6.5 - 30impact
Apple iOS/macOS: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS
0 news outlets0 CERTs0 researchersCVSS 5.5 - 68impact
Apple iOS/macOS: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, i
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 7.8 - 30impact
Apple iOS/macOS: A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, i
0 news outlets0 CERTs0 researchersCVSS 5.5 - 42impact
Apple iOS/macOS: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4
0 news outlets0 CERTs0 researchersCVSS 8.1 - 52impact
Apple iOS/macOS: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7
0 news outlets0 CERTs0 researchersCVSS 9.8 - 24impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 an
0 news outlets0 CERTs0 researchersCVSS 3.3 - 29impact
Apple iOS/macOS: This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17
0 news outlets0 CERTs0 researchersCVSS 4.3 - 26impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monter
0 news outlets0 CERTs0 researchersCVSS 3.3 - 53impact
Apple iOS/macOS: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6
0 news outlets0 CERTs0 researchersCVSS 9.8 - 46impact
Apple iOS/macOS: A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4
0 news outlets0 CERTs0 researchersCVSS 8.1 - 39impact
Apple iOS/macOS: A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16
0 news outlets0 CERTs0 researchersCVSS 6.5 - 44impact
Apple iOS/macOS: A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6,
0 news outlets0 CERTs0 researchersCVSS 8.1 - 44impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 1
0 news outlets0 CERTs0 researchersCVSS 7.7 - 37impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 an
0 news outlets0 CERTs0 researchersCVSS 6.2 - 38impact
Apple iOS/macOS: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6,
0 news outlets0 CERTs0 researchersCVSS 5.3 - 37impact
Apple iOS/macOS: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4
0 news outlets0 CERTs0 researchersCVSS 6.5 - 45impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.
0 news outlets0 CERTs0 researchersCVSS 8.8 - 68impact
Apple iOS/macOS: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 7.8 - 26impact
Apple iOS/macOS: A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's lo
0 news outlets0 CERTs0 researchersCVSS 2.4 - 40impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An att
0 news outlets0 CERTs0 researchersCVSS 5.9 - 38impact
Apple iOS/macOS: A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sono
0 news outlets0 CERTs0 researchersCVSS 5.9 - 30impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4.
0 news outlets0 CERTs0 researchersCVSS 5.5 - 37impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Monterey 1
0 news outlets0 CERTs0 researchersCVSS 7.8 - 42impact
Apple iOS/macOS: An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4,
0 news outlets0 CERTs0 researchersCVSS 7.5 - 38impact
Apple iOS/macOS: The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS S
0 news outlets0 CERTs0 researchersCVSS 6.5 - 32impact
Apple iOS/macOS: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14
0 news outlets0 CERTs0 researchersCVSS 5.3 - 35impact
Apple iOS/macOS: This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4
0 news outlets0 CERTs0 researchersCVSS 4.3 - 44impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and
0 news outlets0 CERTs0 researchersCVSS 7.5 - 43impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.
0 news outlets0 CERTs0 researchersCVSS 8.8 - 30impact
Apple iOS/macOS: The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1.
0 news outlets0 CERTs0 researchersCVSS 4.0 - 24impact
Apple iOS/macOS: This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14
0 news outlets0 CERTs0 researchersCVSS 3.3 - 34impact
Apple iOS/macOS: This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonom
0 news outlets0 CERTs0 researchersCVSS 4.6 - 30impact
Apple iOS/macOS: An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS
0 news outlets0 CERTs0 researchersCVSS 5.5 - 23impact
Apple iOS/macOS: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, m
0 news outlets0 CERTs0 researchersCVSS 3.3 - 36impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, mac
0 news outlets0 CERTs0 researchersCVSS 6.5 - 44impact
Apple iOS/macOS: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma
0 news outlets0 CERTs0 researchersCVSS 8.4 - 40impact
Apple iOS/macOS: This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonom
0 news outlets0 CERTs0 researchersCVSS 6.5 - 30impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and
0 news outlets0 CERTs0 researchersCVSS 4.3 - 30impact
Apple iOS/macOS: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and
0 news outlets0 CERTs0 researchersCVSS 5.5 - 38impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.
0 news outlets0 CERTs0 researchersCVSS 8.2 - 49impact
Apple iOS/macOS: An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, m
0 news outlets0 CERTs0 researchersCVSS 9.1 - 26impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a
0 news outlets0 CERTs0 researchersCVSS 2.4 - 29impact
Apple Xcode: A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekee
0 news outlets0 CERTs0 researchersCVSS 4.3 - 37impact
Apple iOS/macOS: A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An
0 news outlets0 CERTs0 researchersCVSS 6.2 - 37impact
Apple iOS/macOS: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1
0 news outlets0 CERTs0 researchersCVSS 7.8 - 34impact
Apple iOS/macOS: A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma
0 news outlets0 CERTs0 researchersCVSS 6.7 - 32impact
Apple iOS/macOS: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4,
0 news outlets0 CERTs0 researchersCVSS 5.4 - 44impact
Apple iOS/macOS: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS
0 news outlets0 CERTs0 researchersCVSS 8.4 - 33impact
Apple iOS/macOS: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4.
0 news outlets0 CERTs0 researchersCVSS 6.7 - 37impact
Apple iOS/macOS: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.4,
0 news outlets0 CERTs0 researchersCVSS 6.2 - 30impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven
0 news outlets0 CERTs0 researchersCVSS 5.5 - 30impact
Apple iOS/macOS: The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5,
0 news outlets0 CERTs0 researchersCVSS 5.5 - 37impact
Apple iOS/macOS: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4,
0 news outlets0 CERTs0 researchersCVSS 7.8 - 27impact
Apple iOS/macOS: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14
0 news outlets0 CERTs0 researchersCVSS 4.7 - 30impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven
0 news outlets0 CERTs0 researchersCVSS 5.5 - 46impact
Apple iOS/macOS: An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Son
0 news outlets0 CERTs0 researchersCVSS 8.4 - 30impact
Apple iOS/macOS: This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, m
0 news outlets0 CERTs0 researchersCVSS 5.5 - 39impact
Apple iOS/macOS: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven
0 news outlets0 CERTs0 researchersCVSS 8.6 - 38impact
Apple iOS/macOS: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4,
0 news outlets0 CERTs0 researchersCVSS 7.8 - 46impact
Apple iOS/macOS: An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Son
0 news outlets0 CERTs0 researchersCVSS 8.4 - 37impact
Apple iOS/macOS: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu
0 news outlets0 CERTs0 researchersCVSS 6.2 - 30impact
Apple iOS/macOS: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS
0 news outlets0 CERTs0 researchersCVSS 5.5 - 30impact
Apple iOS/macOS: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5,
0 news outlets0 CERTs0 researchersCVSS 5.5 - 44impact
Apple iOS/macOS: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An
0 news outlets0 CERTs0 researchersCVSS 7.5 - 37impact
Apple iOS/macOS: This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to
0 news outlets0 CERTs0 researchersCVSS 6.2
Sources
CERTs and cyber security agencies, national news outlets in every country we could find, vendor advisories, research blogs and the security press. Every source is polled on its own schedule, by RSS where possible and by headless browser where not. Broken feeds are repaired automatically; anything still failing is listed here.
Sources admin
Enter the admin token from your server’s .env file (ADMIN_TOKEN). It’s sent once to start a session and isn’t stored in this browser.
Recent sign-in activity
Pipeline, last 24 hours
How many articles each type of source produced, how many were read in full, and how many were linked to a vulnerability. “Unmatched” are articles that look like vulnerability news but couldn’t be linked; the reasons and examples show what to improve.
Add a source
Coverage
All sources
How it works
Vulnocalypse reads vulnerability registries, government CERTs, vendor advisories, research blogs and newsrooms around the clock, links everything that refers to the same vulnerability, and only shows what passes automated validation.
What gets into the feed
A vulnerability is admitted when it is corroborated, either through a published CVE record or through at least two independent organisations, and its impact score reaches 60 out of 100. Anything listed in a known-exploited catalogue is admitted regardless of score. Once admitted, an entry stays, so the feed never flickers.
Impact score
Up to 30 points for severity (CVSS, or inferred from the description when no score exists), 25 for exploitation, 15 for blast radius by product category (edge devices and identity systems score highest), 15 for attention from news, CERTs and researchers, 10 for EPSS exploitation probability, and 5 for pre-authentication. Every entry shows its breakdown.
Exploitation status
We only mark something exploited when there is a citable source: a KEV listing (CISA, VulnCheck or ENISA), a statement from the vendor or a government agency, CISA’s SSVC assessment, or at least two independent organisations reporting attacks with no later denial from the vendor. Phrases like “no evidence of exploitation” are detected and count against a claim.
Validation, without humans
Identifiers are checked against the CVE List; rejected or non-existent CVEs are dropped. Titles, vendors, products and CVSS come from the official record rather than from headlines. Wire stories syndicated across outlets are counted once. Roundups that list dozens of CVEs only count the ones they actually discuss. Reports without an identifier wait for corroboration and are merged into the right CVE once one is assigned. Every decision is logged and shown on each vulnerability’s page.
The Panic meter
Three numbers over the past 24 hours, counting only vulnerabilities first seen in the last 14 days: distinct researchers posting about them, distinct news organisations covering them, and distinct CERTs and agencies warning about them. Each is ranked against its own 90-day history, weighted 35% CERTs, 35% news and 30% researchers, and stretched so the top levels stay rare. Each day’s score is split across the vulnerabilities that caused it.
The outbreak map
The map shows two things for every country: how many national news outlets are covering new vulnerabilities, and whether the national CERT or cyber security agency has issued a warning. National outlets are read directly, through local-language Google News editions, and through GDELT, which attributes coverage in over 100 languages to its source country. International security press is left off the map so it shows national attention, not trade coverage. Replay the spread to watch a vulnerability travel from patient zero across the world.
Subscribe
- Everything (RSS), also as Atom and JSON Feed
- Exploited only and KEV-listed only
- Updates: new KEV listings, exploitation changes and public exploits for tracked vulnerabilities
- Per vendor:
/feed.xml?vendor=Fortinet, or by score:/feed.xml?min_score=80
Use it from an AI agent
Vulnocalypse runs a read-only MCP server. Add it to any MCP client as a remote server:
https://vulnocalypse.com/mcpTools: get_feed, search_vulnerabilities, get_vulnerability, check_exposure (send the products you run and get back anything that affects them), get_panic and explain_panic_day. The JSON API is documented at /api/docs.