CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2019-1215Microsoft Windows Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-1214Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-11708Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability Mozilla Firefox ESR, Mozilla Firefox, Mozilla Thunderbird Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2019-11707Mozilla Firefox and Thunderbird Type Confusion Vulnerability Mozilla Firefox ESR, Mozilla Firefox, Mozilla Thunderbird Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-11581Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability Atlassian Jira Server and Data Center Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-11580Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian Crowd Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8High |
| CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2019-1132Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-1130Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft Windows Server, Microsoft Windows, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-1129Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-11043Underflow in PHP-FPM can lead to RCE PHP PHP Reported workaround → |
Known exploitedCISA KEV | 8.7High |
| CVE-2019-11001Reolink Multiple IP Cameras OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2019-10758MongoDB mongo-express Remote Code Execution Vulnerability n/a mongo-express Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2019-1069Task Scheduler Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1703, Microsoft Windows 10 Version 1803, Microsoft Windows Server, version 1803 (Server Core Installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-1068Microsoft SQL Server Remote Code Execution Vulnerability Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR), Microsoft Microsoft SQL Server, Microsoft Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR), Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR), Microsoft Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-1064Windows Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1703, Microsoft Windows 10 Version 1803, Microsoft Windows Server, version 1803 (Server Core Installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-10149Exim Mail Transfer Agent (MTA) Improper Input Validation exim exim Versions & vendor guidance → |
Known exploitedCISA KEV | 9Critical |
| CVE-2019-10068Kentico Xperience Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-1003030Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Jenkins project Jenkins Pipeline: Groovy Plugin Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2019-1003029Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins project Jenkins Script Security Plugin Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2019-0903Microsoft GDI Remote Code Execution Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-0880Microsoft Windows Privilege Escalation Vulnerability Microsoft Windows Server, Microsoft Windows, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0863Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.