CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2021-29256Arm Mali GPU Kernel Driver Use-After-Free Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-28799Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) QNAP Systems Inc. HBS 3, QNAP Systems Inc. HBS 2, QNAP Systems Inc. HBS 1.3 Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2021-28664Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-28663Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-28550Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution Adobe Acrobat Reader Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2021-28310Win32k Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1803, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 2004, Microsoft Windows Server version 2004, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-27878Veritas Backup Exec Agent Command Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-27877Veritas Backup Exec Agent Improper Authentication Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2021-27876Veritas Backup Exec Agent File Access Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2021-27860Arbitrary file upload vulnerability in FatPipe software FatPipe WARP, FatPipe IPVPN, FatPipe MPVPN Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27852Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox Survey Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2021-27561Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27137DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT DD-WRT Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2021-27104Accellion FTA OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27103Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27102Accellion FTA OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-27101Accellion FTA SQL Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27085Internet Explorer Remote Code Execution Vulnerability Microsoft Internet Explorer 11 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2013 Service Pack 1, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-27059Microsoft Office Remote Code Execution Vulnerability Microsoft Microsoft Office 2010 Service Pack 2, Microsoft Microsoft Office 2013 Service Pack 1, Microsoft Microsoft Office 2016 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.6High |
| CVE-2021-26858Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-26857Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2010 Service Pack 3, Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2013 Service Pack 1, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 5.4Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.