CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2020-10221rConfig OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2020-1020Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2020-10199Sonatype Nexus Repository Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2020-10189Zoho ManageEngine Desktop Central File Upload Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-10181Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-10148SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands SolarWinds Orion Platform Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-0986Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 2004 for 32-bit Systems, Microsoft Windows Server, version 2004 (Server Core installation), Microsoft Windows 10 Version 2004 for ARM64-based Systems, Microsoft Windows 10 Version 2004 for x64-based Systems Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0968Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer 9, Microsoft Internet Explorer 11, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows Server 2012 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0878Microsoft Browser Memory Corruption Vulnerability Microsoft ChakraCore, Microsoft Microsoft Edge (EdgeHTML-based), Microsoft Internet Explorer 9, Microsoft Internet Explorer 11 Versions & vendor guidance → |
Known exploitedCISA KEV | 4.2Medium |
| CVE-2020-0796Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0688Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2020-0683Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0674Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows Server 2012, Microsoft Internet Explorer 9 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2020-0646Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation), Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems, Microsoft Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft Microsoft .NET Framework 4.8 on Windows RT 8.1, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation), Microsoft Microsoft .NET Framework 4.6, Microsoft Microsoft .NET Framework 3.0, Microsoft Microsoft .NET Framework 3.5, Microsoft Microsoft .NET Framework 3.5.1, Microsoft Microsoft .NET Framework 4.5.2, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-0638Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows Server, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1909 for ARM64-based Systems Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0618Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft Microsoft SQL Server, Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU), Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-0601Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1909 for ARM64-based Systems Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2020-0069Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0041Android Kernel Out-of-Bounds Write Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-9978WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2019-9875Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-9874Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.