CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-118772joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service hapijs joi, @hapi joi Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118764minimatch: potential denial of service via globparts amplification isaacs minimatch Versions & vendor guidance → |
Not in downloaded KEV | 6.9Medium |
| CVE-2026-118761Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118750ASP.NET Core Denial of Service Vulnerability Microsoft Microsoft.AspNetCore.WebUtilities Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118749ASP.NET Core Denial of Service Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.Extensions.Validation Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118748ASP.NET Core Denial of Service Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118747.NET Denial of Service Vulnerability Microsoft System.Formats.Cbor Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118746.NET Security Feature Bypass Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-118745Visual Studio Remote Code Execution Vulnerability Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118742Azure Front Door Elevation of Privilege Vulnerability Microsoft Azure Front Door Versions & vendor guidance → |
Not in downloaded KEV | 8.6High |
| CVE-2026-118741ASP.NET Core Elevation of Privilege Vulnerability Microsoft Microsoft.dotnet-scaffold, Microsoft Microsoft.dotnet-scaffold-aspnet, Microsoft Microsoft.DotNet.Web.ProjectTemplates.10.0, Microsoft Microsoft.DotNet.Web.ProjectTemplates.8.0, Microsoft Microsoft.DotNet.Web.ProjectTemplates.9.0, Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design, Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc Versions & vendor guidance → |
Not in downloaded KEV | 8.1High |
| CVE-2026-118740Aspire Security Feature Bypass Vulnerability Microsoft Aspire Dashboard, Microsoft Aspire.Dashboard.Sdk.linux-x64 Versions & vendor guidance → |
Not in downloaded KEV | 9.1Critical |
| CVE-2026-118737Remote Procedure Call Runtime Remote Code Execution Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 8.1High |
| CVE-2026-118735Active Directory Domain Services Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-118730Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118713Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118711Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118702Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024 Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118701Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Ivanti Connect Secure Versions & vendor guidance → |
Known exploitedCISA KEV | 4.3Medium |
| CVE-2026-118297Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118296Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118292Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-118288Microsoft Azure File Sync Elevation of Privilege Vulnerability Microsoft Azure File Sync, Microsoft Azure File Sync v22 Versions & vendor guidance → |
Not in downloaded KEV | 7High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.