CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft Corporation Office/WordPad Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Microsoft Corporation Windows Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft Corporation Internet Browser Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability Microsoft Corporation XML Core Services Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft Corporation Windows GDI Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft Corporation Windows GDI Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability Apache Software Foundation Apache Tomcat Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2016-8562 Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability n/a Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-7855 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability Sky Co., LTD. SKYSEA Client View Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.