CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-94517Windows Kernel Transaction Manager Information Disclosure Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 5.5Medium |
| CVE-2026-94514Windows Kernel Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7High |
| CVE-2026-94127BIG-IP APM OAuth vulnerability F5 BIG-IP Reported workaround → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-93952Security Advisory 0183 Arista Networks VeloCloud Orchestrator (VCO) On-Prem Reported fix guidance → |
Known exploitedCISA KEV | 9.5Critical |
| CVE-2026-93616Directory Traversal and File upload allows execution of arbitrary script on the Management Server checkpoint Quantum Security Management Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-93363Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route payloadcms payload Versions & vendor guidance → |
Not in downloaded KEV | 5.3Medium |
| CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation IBM Langflow OSS Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-90970Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway GitLab GitLab AI Gateway Reported fix guidance → |
Not in downloaded KEV | 9.9Critical |
| CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 Drupal Drupal core Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-9063CVE-2026-9063 Axis Communications AB AXIS OS Versions & vendor guidance → |
Not in downloaded KEV | 6.7Medium |
| CVE-2026-88986Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 6.1Medium |
| CVE-2026-88985Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 6.5Medium |
| CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 7.2High |
| CVE-2026-88983Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 5Medium |
| CVE-2026-88982Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user) kubeflow pipelines Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2026-88968Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV | 7.7High |
| CVE-2026-88779Memory overflow vulnerability leading to Denial of Service NetScaler ADC, NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 8.7High |
| CVE-2026-88772Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Citrix NetScaler ADC, Citrix NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.5Critical |
| CVE-2026-88771A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands Citrix NetScaler ADC, Citrix NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.5Critical |
| CVE-2026-88243Windows DHCP Server Remote Code Execution Vulnerability Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 9.8Critical |
| CVE-2026-88242Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7High |
| CVE-2026-88238Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-88235Servicing Stack Updates Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022 Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-88230Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2026-88211Graphic Fonts Information Disclosure Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 5.7Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.