CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2019-0859Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0841Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0808Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0803Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0797Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Server, Microsoft Windows Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0752Microsoft Internet Explorer Type Confusion Vulnerability Microsoft Internet Explorer 11, Microsoft Internet Explorer 10 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2019-0708Microsoft Remote Desktop Services Remote Code Execution Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-0703Microsoft Windows SMB Information Disclosure Vulnerability Microsoft Windows, Microsoft Windows Server Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2019-0676Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft Internet Explorer 11, Microsoft Internet Explorer 10 Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2019-0604Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Server, Microsoft Microsoft SharePoint Foundation, Microsoft Microsoft SharePoint Enterprise Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-0543Microsoft Windows Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0541Microsoft MSHTML Remote Code Execution Vulnerability Microsoft Microsoft Office, Microsoft Microsoft Office Word Viewer, Microsoft Internet Explorer 9, Microsoft Internet Explorer 11, Microsoft Microsoft Excel Viewer, Microsoft Internet Explorer 10, Microsoft Office Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-0344SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP SE SAP Commerce Cloud (virtualjdbc extension) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-0211Apache HTTP Server Privilege Escalation Vulnerability Apache Apache HTTP Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-0193Apache Solr DataImportHandler Code Injection Vulnerability Apache Apache Solr Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2018-9276Paessler PRTG Network Monitor OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2018-8653Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer 9, Microsoft Internet Explorer 11, Microsoft Internet Explorer 10 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2018-8639Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2019, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2018-8611Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2019, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2018-8589Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Server 2008, Microsoft Windows 7, Microsoft Windows Server 2008 R2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2018-8581Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Microsoft Exchange Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.4High |
| CVE-2018-8453Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2019, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2018-8440Microsoft Windows Privilege Escalation Vulnerability Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2018-8414Microsoft Windows Shell Remote Code Execution Vulnerability Microsoft Windows 10 Servers, Microsoft Windows 10 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2018-8406Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows 10 Servers Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.