CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2024-23222Apple Multiple Products WebKit Type Confusion Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-23113Fortinet Multiple Products Format String Vulnerability Fortinet FortiSwitchManager, Fortinet FortiOS, Fortinet FortiPAM, Fortinet FortiProxy Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2024-21762Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet FortiOS, Fortinet FortiProxy Reported fix guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2024-21413Microsoft Outlook Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 2016, Microsoft Microsoft Office 2019, Microsoft Microsoft Office LTSC 2021 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21412Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2024-21410Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21351Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.6High |
| CVE-2024-21338Windows Kernel Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle Corporation Oracle Agile PLM Framework Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle Corporation Agile PLM Framework Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-20767ColdFusion | Improper Access Control (CWE-284) Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 7.4High |
| CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV | 5.8Medium |
| CVE-2024-20439Cisco Smart Licensing Utility Static Credential Vulnerability Cisco Cisco Smart License Utility Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-20399Cisco NX-OS Software CLI Command Injection Vulnerability Cisco Cisco NX-OS Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6Medium |
| CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6Medium |
| CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2024-1709Authentication bypass using an alternate path or channel ConnectWise ScreenConnect Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2024-1708Improper limitation of a pathname to a restricted directory (“path traversal”) ConnectWise ScreenConnect Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection DrayTek Vigor2960, DrayTek Vigor300B Versions & vendor guidance → |
Known exploitedCISA KEV | 6.9Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.