CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-6277 NETGEAR Multiple Routers Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-5198 Google Chromium V8 Out-of-Bounds Memory Vulnerability n/a Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-5195 Linux Kernel Race Condition Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2016-4657 Apple iOS Webkit Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2016-4656 Apple iOS Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-4655 Apple iOS Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2016-4523 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2016-4437 Apache Shiro Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-4117 Adobe Flash Player Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2016-3718 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.4High
CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.