CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-91141CVE-2026-91141 COVESA vSomeIp Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-109478ASP.NET Core Denial of Service Vulnerability Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-109476ASP.NET Core Information Disclosure Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 6.1Medium |
| CVE-2026-109475.NET Denial of Service Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-105544.NET Elevation of Privilege Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.TestPlatform.CLI Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-99281tun: Require CAP_NET_ADMIN to attach to an ownerless device Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-99223keys: make keyring indexes independent of kernel addresses Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-99222keys: Protect the read method check against type removal Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-99221keys/trusted_keys: return immediately after TPM unseal failure Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-99220asymmetric_keys: reject trust keys without IDs Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-99219ftrace: Initialize modname and offset in print_rec() Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-99218coredump: hold RCU while releasing parked threads Linux Linux Versions & vendor guidance → |
Not in downloaded KEV | 7High |
| CVE-2026-97705Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser moleculerjs moleculer Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-97406Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting Xerj Console API Versions & vendor guidance → |
Not in downloaded KEV | 9.1Critical |
| CVE-2026-97371ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets ntop ntopng Versions & vendor guidance → |
Not in downloaded KEV | 5.3Medium |
| CVE-2026-97229Integer Overflow or Wraparound in GitLab GitLab GitLab Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-97013Windows Shell Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-96982HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-96979HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-96974HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-96951Windows Shell Security Feature Bypass Vulnerability Microsoft Microsoft Edge (Chromium-based), Microsoft Outlook.com, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-96760Authlib library contains a signature‑verification bypass vulnerability Authlib Authlib Versions & vendor guidance → |
Not in downloaded KEV | 9.8Critical |
| CVE-2026-96656Plex Media Server arbitrary file write Plex Media Server Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2026-96655Plex Media Server arbitrary-host SSRF Plex Media Server Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2026-96654Plex Media Server URL injection Plex Media Server Versions & vendor guidance → |
Known exploitedCISA KEV | 6.9Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.