CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2023-41993Apple Multiple Products WebKit Code Execution Vulnerability Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-41992Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple macOS, Apple iOS and iPadOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-41991Apple Multiple Products Improper Certificate Validation Vulnerability Apple iOS and iPadOS, Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2023-41990Apple Multiple Products Code Execution Vulnerability Apple iOS and iPadOS, Apple tvOS, Apple macOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-41974Apple iOS and iPadOS Use-After-Free Vulnerability Apple iOS and iPadOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-41763Skype for Business Elevation of Privilege Vulnerability Microsoft Skype for Business Server 2015 CU13, Microsoft Skype for Business Server 2019 CU7 Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2023-41266Qlik Sense Path Traversal Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2023-41265Qlik Sense HTTP Tunneling Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2023-41179Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro, Inc. Trend Micro Apex One, Trend Micro, Inc. Trend Micro Worry-Free Business Security, Trend Micro, Inc. Trend Micro Worry-Free Business Security Services Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple macOS, Apple iOS and iPadOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-41061Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple iOS and iPadOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-40044WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability Progress Software Corporation WS_FTP Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS RT-AX55 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-38950ZKTeco BioTime Path Traversal Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-38831RARLAB WinRAR Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-38606Apple Multiple Products Kernel Unspecified Vulnerability Apple tvOS, Apple iOS and iPadOS, Apple macOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2023-38205ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-38203Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-38180.NET and Visual Studio Denial of Service Vulnerability Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft ASP.NET Core 2.1, Microsoft Microsoft Visual Studio 2022 version 17.2, Microsoft Microsoft Visual Studio 2022 version 17.4, Microsoft Microsoft Visual Studio 2022 version 17.6 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-38035Ivanti Sentry Authentication Bypass Vulnerability Ivanti MobileIron Sentry Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2023-37450Apple Multiple Products WebKit Code Execution Vulnerability Apple Safari, Apple tvOS, Apple iOS and iPadOS, Apple macOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-36884Windows Search Remote Code Execution Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-36874Windows Error Reporting Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-36851Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 5.3Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.