CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2023-36847Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2023-36846Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2023-36845Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-36844Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2023-36802Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-36761Microsoft Word Information Disclosure Vulnerability Microsoft Microsoft Office 2019, Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Word 2016, Microsoft Microsoft Word 2013 Service Pack 1 Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2023-36584Windows Mark of the Web Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 5.4Medium |
| CVE-2023-36563Microsoft WordPad Information Disclosure Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2023-36424Windows Common Log File System Driver Elevation of Privilege Vulnerability Microsoft Windows 11 version 22H3, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 11 Version 23H2, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-36036Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows 11 version 22H3, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 11 Version 23H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-36033Windows DWM Core Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-36025Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-35674Android Framework Privilege Escalation Vulnerability Google Android Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office 2019, Microsoft Microsoft Outlook 2016, Microsoft Microsoft Outlook 2013, Microsoft Microsoft Outlook 2013 Service Pack 1 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix NetScaler ADC, Citrix NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti EPMM Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti EPMM Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-35078Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-34362Progress MOVEit Transfer SQL Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9Critical |
| CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability VMware VMware vCenter Server, VMware VMware Cloud Foundation (VMware vCenter Server) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-33538TP-Link Multiple Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-33246Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function Apache Software Foundation Apache RocketMQ Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-33107Integer Overflow or Wraparound in Graphics Linux Qualcomm, Inc. Snapdragon Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2023-33106Use of Out-of-range Pointer Offset in Graphics Qualcomm, Inc. Snapdragon Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.