Live tracker of exploited and high-impact vulnerabilities
New vulnerabilities from CERTs, vendors, researchers and newsrooms in 180+ countries, checked automatically, with how widely each one is being exploited, warned about and covered.
Panic meter
Connecting- Researchers talking
- –
- News outlets covering
- –
- CERTs and agencies warning
- –
Distinct people and organisations discussing new vulnerabilities in the past 24 hours.
Trending now
Outbreak map
- Countries in the news
- –
- Agencies warning
- –
- Countries warned
- –
- Patient zero
- –
Daily panic
Vulnerabilities
Google vulnerabilities
Every Google vulnerability Vulnocalypse is tracking, newest first: whether it’s being exploited, which CERTs have warned about it and how widely it’s covered. Subscribe with the RSS feed for Google alerts.
- 67impact
Google Chrome: Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sand
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 8.8 - 67impact
Google Chrome: Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a c
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 8.8 - 67impact
Google Chrome: Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 8.8 - 67impact
Google Chrome: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execut
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 8.8 - 67impact
Out-of-Bounds Write in Google Brotli Decoder
Public exploit code0 news outlets5 CERTs2 researchersCVSS 9.2 - 79impact
Google Chrome: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code in
Known exploited (KEV) (CISA)0 news outlets1 CERTs1 researchersCVSS 8.8 - 80impact
Google Chrome: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside
Known exploited (KEV) (CISA)0 news outlets1 CERTs1 researchersCVSS 8.8 - 47impact
Google Chrome: A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versi
0 news outlets0 CERTs0 researchersCVSS 9.1 - 45impact
Parsing issue in protobuf textformat
0 news outlets0 CERTs0 researchersCVSS 7.5 - 42impact
Google Chrome: Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap c
0 news outlets0 CERTs0 researchersCVSS 7.5 - 38impact
Google Chrome: Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local att
0 news outlets0 CERTs0 researchersCVSS 7.8 - 44impact
Apple Music Classical 2.3 for Android
0 news outlets3 CERTs0 researchersCVSS 6.2 - 73impact
Google Chrome: Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote at
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 8.8 - 29impact
Google Chrome: Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a use
0 news outlets0 CERTs0 researchersCVSS 4.3 - 73impact
Google Chrome: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor
Known exploited (KEV) (CISA)0 news outlets0 CERTs0 researchersCVSS 8.8 - 40impact
libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2
0 news outlets0 CERTs0 researchersCVSS 8.7 - 46impact
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
0 news outlets0 CERTs0 researchersCVSS 8.3 - 39impact
Google Chrome: Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the re
0 news outlets0 CERTs0 researchersCVSS 8.3 - 42impact
Google Chrome: Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 33impact
Google Chrome: Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially rea
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside
0 news outlets0 CERTs0 researchersCVSS 8.8 - 45impact
Google Chrome: Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exe
0 news outlets0 CERTs0 researchersCVSS 9.6 - 42impact
Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i
0 news outlets0 CERTs0 researchersCVSS 8.8 - 45impact
Google Chrome: Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 9.6 - 34impact
Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read me
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentia
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arb
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute a
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c
0 news outlets0 CERTs0 researchersCVSS 8.8 - 44impact
Google Chrome: Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially
0 news outlets0 CERTs0 researchersCVSS 9.6 - 42impact
Google Chrome: Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr
0 news outlets0 CERTs0 researchersCVSS 8.8 - 33impact
Google Chrome: Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory ins
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentia
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arb
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to
0 news outlets0 CERTs0 researchersCVSS 8.8 - 33impact
Google Chrome: Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory ins
0 news outlets0 CERTs0 researchersCVSS 6.5 - 43impact
Google Chrome: Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 43impact
Google Chrome: Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 34impact
Google Chrome: Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially lea
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbi
0 news outlets0 CERTs0 researchersCVSS 8.8 - 45impact
Google Chrome: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 9.6 - 42impact
Google Chrome: Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrar
0 news outlets0 CERTs0 researchersCVSS 8.8 - 45impact
Google Chrome: Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execut
0 news outlets0 CERTs0 researchersCVSS 9.6 - 42impact
Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod
0 news outlets0 CERTs0 researchersCVSS 8.8 - 44impact
Google Chrome: Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to po
0 news outlets0 CERTs0 researchersCVSS 9.6 - 45impact
Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execut
0 news outlets0 CERTs0 researchersCVSS 9.6 - 42impact
Google Chrome: Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code ins
0 news outlets0 CERTs0 researchersCVSS 8.8 - 34impact
Google Chrome: Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potential
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potent
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 43impact
Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbit
0 news outlets0 CERTs0 researchersCVSS 8.8 - 44impact
Google Chrome: Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exec
0 news outlets0 CERTs0 researchersCVSS 9.6 - 41impact
Google Chrome: Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to e
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbit
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute
0 news outlets0 CERTs0 researchersCVSS 8.8 - 43impact
Google Chrome: Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exe
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid
0 news outlets0 CERTs0 researchersCVSS 8.8 - 33impact
Google Chrome: Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially ex
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code ins
0 news outlets0 CERTs0 researchersCVSS 8.8 - 33impact
Google Chrome: Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially re
0 news outlets0 CERTs0 researchersCVSS 6.5 - 42impact
Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute a
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute ar
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbit
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute ar
0 news outlets0 CERTs0 researchersCVSS 8.8 - 45impact
Google Chrome: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arb
0 news outlets0 CERTs0 researchersCVSS 9.6 - 34impact
Google Chrome: Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory i
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
Google Chrome: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially
0 news outlets0 CERTs0 researchers - 42impact
Google Chrome: Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially exec
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potenti
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi
0 news outlets0 CERTs0 researchersCVSS 8.8 - 41impact
Google Chrome: Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to poten
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
Google Chrome: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially
0 news outlets0 CERTs0 researchersCVSS 8.8
Sources
CERTs and cyber security agencies, national news outlets in every country we could find, vendor advisories, research blogs and the security press. Every source is polled on its own schedule, by RSS where possible and by headless browser where not. Broken feeds are repaired automatically; anything still failing is listed here.
Sources admin
Enter the admin token from your server’s .env file (ADMIN_TOKEN). It’s sent once to start a session and isn’t stored in this browser.
Recent sign-in activity
Pipeline, last 24 hours
How many articles each type of source produced, how many were read in full, and how many were linked to a vulnerability. “Unmatched” are articles that look like vulnerability news but couldn’t be linked; the reasons and examples show what to improve.
Add a source
Coverage
All sources
How it works
Vulnocalypse reads vulnerability registries, government CERTs, vendor advisories, research blogs and newsrooms around the clock, links everything that refers to the same vulnerability, and only shows what passes automated validation.
What gets into the feed
A vulnerability is admitted when it is corroborated, either through a published CVE record or through at least two independent organisations, and its impact score reaches 60 out of 100. Anything listed in a known-exploited catalogue is admitted regardless of score. Once admitted, an entry stays, so the feed never flickers.
Impact score
Up to 30 points for severity (CVSS, or inferred from the description when no score exists), 25 for exploitation, 15 for blast radius by product category (edge devices and identity systems score highest), 15 for attention from news, CERTs and researchers, 10 for EPSS exploitation probability, and 5 for pre-authentication. Every entry shows its breakdown.
Exploitation status
We only mark something exploited when there is a citable source: a KEV listing (CISA, VulnCheck or ENISA), a statement from the vendor or a government agency, CISA’s SSVC assessment, or at least two independent organisations reporting attacks with no later denial from the vendor. Phrases like “no evidence of exploitation” are detected and count against a claim.
Validation, without humans
Identifiers are checked against the CVE List; rejected or non-existent CVEs are dropped. Titles, vendors, products and CVSS come from the official record rather than from headlines. Wire stories syndicated across outlets are counted once. Roundups that list dozens of CVEs only count the ones they actually discuss. Reports without an identifier wait for corroboration and are merged into the right CVE once one is assigned. Every decision is logged and shown on each vulnerability’s page.
The Panic meter
Three numbers over the past 24 hours, counting only vulnerabilities first seen in the last 14 days: distinct researchers posting about them, distinct news organisations covering them, and distinct CERTs and agencies warning about them. Each is ranked against its own 90-day history, weighted 35% CERTs, 35% news and 30% researchers, and stretched so the top levels stay rare. Each day’s score is split across the vulnerabilities that caused it.
The outbreak map
The map shows two things for every country: how many national news outlets are covering new vulnerabilities, and whether the national CERT or cyber security agency has issued a warning. National outlets are read directly, through local-language Google News editions, and through GDELT, which attributes coverage in over 100 languages to its source country. International security press is left off the map so it shows national attention, not trade coverage. Replay the spread to watch a vulnerability travel from patient zero across the world.
Subscribe
- Everything (RSS), also as Atom and JSON Feed
- Exploited only and KEV-listed only
- Updates: new KEV listings, exploitation changes and public exploits for tracked vulnerabilities
- Per vendor:
/feed.xml?vendor=Fortinet, or by score:/feed.xml?min_score=80
Use it from an AI agent
Vulnocalypse runs a read-only MCP server. Add it to any MCP client as a remote server:
https://vulnocalypse.com/mcp
Tools: get_feed, search_vulnerabilities, get_vulnerability, check_exposure (send the products you run and get back anything that affects them), get_panic and explain_panic_day. The JSON API is documented at /api/docs.