November 13, 2026 Follow Egret

CVE tracker

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerabilityExploitationCVSS
CVE-2026-114157ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-114156ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12

Versions & vendor guidance →
Not in downloaded KEV 6.5Medium
CVE-2026-114155.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft Microsoft.DotNet.HotReload.Watch.Aspire

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-114154ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.Server.HttpSys

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-114152Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12

Versions & vendor guidance →
Not in downloaded KEV 8.8High
CVE-2026-114151Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12

Versions & vendor guidance →
Not in downloaded KEV 8.8High
CVE-2026-114150ASP.NET Core Information Disclosure Vulnerability

Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft Microsoft Visual Studio 2026 version 18.12

Versions & vendor guidance →
Not in downloaded KEV 5.9Medium
CVE-2026-114149ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.WebUtilities

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-114147ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.SignalR.StackExchangeRedis

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-114146ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux, Microsoft .NET 10.0 installed on Mac OS, Microsoft .NET 10.0 installed on Windows, Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft .NET 8.0 installed on Linux, Microsoft .NET 8.0 installed on Mac OS, Microsoft .NET 8.0 installed on Windows, Microsoft .NET 9.0 installed on Linux, Microsoft .NET 9.0 installed on Mac OS, Microsoft .NET 9.0 installed on Windows, Microsoft Microsoft Visual Studio 2022 version 17.14, Microsoft Microsoft Visual Studio 2026 version 18.11, Microsoft Microsoft Visual Studio 2026 version 18.12, Microsoft Microsoft.AspNetCore.Http.Connections

Versions & vendor guidance →
Not in downloaded KEV 9Critical
CVE-2026-113970CVE-2026-113970

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 8.8High
CVE-2026-113969CVE-2026-113969

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV Unknown
CVE-2026-113968CVE-2026-113968

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 5.4Medium
CVE-2026-113965CVE-2026-113965

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 5.4Medium
CVE-2026-113964CVE-2026-113964

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 5.4Medium
CVE-2026-113963CVE-2026-113963

Apple iOS and iPadOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 5.5Medium
CVE-2026-113961CVE-2026-113961

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-113960CVE-2026-113960

Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Versions & vendor guidance →
Not in downloaded KEV Unknown
CVE-2026-113865Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 7.8High
CVE-2026-113864Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 6.4Medium
CVE-2026-113862Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 8.1High
CVE-2026-113861Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-113860Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 7High
CVE-2026-113859Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 7.5High
CVE-2026-113856Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Versions & vendor guidance →
Not in downloaded KEV 7.8High
Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.

Egret — Back to top Egret