CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-22518Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-21823Windows Graphics Component Remote Code Execution Vulnerability Microsoft Microsoft Office for Android, Microsoft Microsoft Office for iOS, Microsoft Microsoft Office for Universal, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 20H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-21715Microsoft Publisher Security Feature Bypass Vulnerability Microsoft Microsoft 365 Apps for Enterprise Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 8.1, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability Adobe Acrobat Reader Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-21529Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-21492Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 4.4Medium |
| CVE-2023-2136Google Chrome Skia Integer Overflow Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2023-21237Android Pixel Information Disclosure Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 6.2Medium |
| CVE-2023-20963Android Framework Privilege Escalation Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-20887Vmware Aria Operations for Networks Command Injection Vulnerability n/a Aria Operations for Networks (Formerly vRealize Network Insight) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-20867VMware Tools Authentication Bypass Vulnerability VMware VMware Tools Versions & vendor guidance → |
Known exploitedCISA KEV | 3.9Low |
| CVE-2023-2033Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-20273Cisco IOS XE Web UI Command Injection Vulnerability Cisco Cisco IOS XE Software Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV | 5Medium |
| CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco Cisco IOS XE Software Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-20118Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco IOS, Cisco Cisco IOS XE Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6.6Medium |
| CVE-2023-1671Sophos Web Appliance Command Injection Vulnerability Sophos Sophos Web Appliance Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-1389TP-Link Archer AX-21 Command Injection Vulnerability n/a TP-Link Archer AX21 (AX1800) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-0669Fortra GoAnywhere MFT License Response Servlet Command Injection Fortra Goanywhere MFT Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.