CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-124317libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16 libexpat libexpat Versions & vendor guidance → |
Not in downloaded KEV | 6.3Medium |
| CVE-2026-124194Microsoft Outlook Spoofing Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024 Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2026-124185Microsoft Office Word Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024 Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-124170Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-12411Broken Access Control in Canonical LXD DevLXD API Canonical lxd Reported fix guidance → |
Not in downloaded KEV | 8.4High |
| CVE-2026-12389CVE-2026-12389 Axis Communications AB AXIS Camera Station Pro Versions & vendor guidance → |
Not in downloaded KEV | 8.4High |
| CVE-2026-123218IBM Aspera Faspex Authorization Bypass IBM Aspera Faspex Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-123158OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability OpenBSD OpenSSH Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 5.5Medium |
| CVE-2026-122194Microsoft Defender Remote Code Execution Vulnerability Microsoft Microsoft Malware Protection Engine Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-122175Windows Autopilot Elevation of Privilege Vulnerability Microsoft Windows 11 version 26H1 Versions & vendor guidance → |
Not in downloaded KEV | 7High |
| CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-121690CVE-2026-121690 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121689CVE-2026-121689 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121688CVE-2026-121688 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121687CVE-2026-121687 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121686CVE-2026-121686 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121685CVE-2026-121685 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121668Azure Confidential Clean Rooms Tampering Vulnerability Microsoft Azure Confidential Clean Room Versions & vendor guidance → |
Not in downloaded KEV | 7.7High |
| CVE-2026-121663Visual Studio Code Security Feature Bypass Vulnerability Microsoft Visual Studio Code Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-121662Visual Studio Code Remote Code Execution Vulnerability Microsoft Visual Studio Code Versions & vendor guidance → |
Not in downloaded KEV | 8.6High |
| CVE-2026-121520Malicious client could set xattr value outside of BuildKit state directory Moby BuildKit Reported fix guidance → |
Not in downloaded KEV | 4.5Medium |
| CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat OpenShift Container Platform 4, Red Hat Red Hat OpenShift Container Platform 5 Reported workaround → |
Not in downloaded KEV | 6.5Medium |
| CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat OpenShift Container Platform 4, Red Hat Red Hat OpenShift Container Platform 5 Reported workaround → |
Not in downloaded KEV | 7.4High |
| CVE-2026-120796.NET Denial of Service Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft System.Text.Json Versions & vendor guidance → |
Not in downloaded KEV | 5.3Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.