CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2013-2465 Oracle Java SE Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2013-2423 Oracle JRE Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	3.7Low
CVE-2013-2251 Apache Struts Improper Input Validation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.4High
CVE-2013-1690 Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2013-1675 Mozilla Firefox Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2013-0641 Adobe Reader Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2013-0640 Adobe Reader and Acrobat Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2013-0632 Adobe ColdFusion Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2013-0631 Adobe ColdFusion Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2013-0629 Adobe ColdFusion Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2013-0625 Adobe ColdFusion Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2013-0431 Oracle JRE Sandbox Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	3.7Low
CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-5054 Adobe Flash Player Integer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2012-4681 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.