CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-115735Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion Unknown Somatic Framework Versions & vendor guidance → |
Not in downloaded KEV | 9.6Critical |
| CVE-2026-115734Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path Unknown Pay with a tweet Versions & vendor guidance → |
Not in downloaded KEV | 9.6Critical |
| CVE-2026-114625Security Advisory 0199 Arista Networks VeloCloud Orchestrator Reported fix guidance → |
Known exploitedCISA KEV | 9.4Critical |
| CVE-2026-114169Windows Raw Image Extension Remote Code Execution Vulnerability Microsoft Raw Image Extension Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-114161Azure CycleCloud Elevation of Privilege Vulnerability Microsoft Azure CycleCloud 8.9.2 Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-114160Azure Managed Grafana Elevation of Privilege Vulnerability Microsoft Azure Managed Grafana Versions & vendor guidance → |
Not in downloaded KEV | 9.8Critical |
| CVE-2026-114159Visual Studio Remote Code Execution Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-114158Visual Studio Remote Code Execution Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-114157ASP.NET Core Security Feature Bypass Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-114156ASP.NET Core Security Feature Bypass Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 6.5Medium |
| CVE-2026-114155.NET Elevation of Privilege Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft Microsoft.DotNet.HotReload.Watch.Aspire Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-114154ASP.NET Core Denial of Service Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.Server.HttpSys Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-114152Visual Studio Remote Code Execution Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-114151Visual Studio Remote Code Execution Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-114150ASP.NET Core Information Disclosure Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 5.9Medium |
| CVE-2026-114149ASP.NET Core Denial of Service Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.WebUtilities Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-114147ASP.NET Core Denial of Service Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.SignalR.StackExchangeRedis Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-114146ASP.NET Core Elevation of Privilege Vulnerability Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.Http.Connections Versions & vendor guidance → |
Not in downloaded KEV | 9Critical |
| CVE-2026-113970CVE-2026-113970 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-113969CVE-2026-113969 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-113968CVE-2026-113968 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2026-113965CVE-2026-113965 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2026-113964CVE-2026-113964 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2026-113963CVE-2026-113963 Apple iOS and iPadOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 5.5Medium |
| CVE-2026-113961CVE-2026-113961 Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.