CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2012-3152 Oracle Fusion Middleware Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2012-1823 PHP-CGI Query String Parameter Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-1723 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2012-0767 Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	4.7Medium
CVE-2012-0507 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	5.7Medium
CVE-2011-3544 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2011-1823 Android OS Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2011-0611 Adobe Flash Player Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.