CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2025-21418Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-21391Windows Storage Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.1High |
| CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-21043Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2025-21042Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2025-20393Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability Cisco Cisco Secure Email, Cisco Cisco Secure Email and Web Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2025-20352Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco IOS, Cisco Cisco IOS XE Software, Cisco Cisco IOS XE Catalyst SD-WAN Versions & vendor guidance → |
Known exploitedCISA KEV | 7.7High |
| CVE-2025-20337Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Cisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2025-20281Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Cisco Cisco Identity Services Engine Software Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 Brocade Fabric OS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2025-15556Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification notepad-plus-plus notepad-plus-plus Versions & vendor guidance → |
Known exploitedCISA KEV | 7.7High |
| CVE-2025-14847Zlib compressed protocol header length confusion may allow memory read MongoDB Inc. MongoDB Server Versions & vendor guidance → |
Known exploitedCISA KEV | 8.7High |
| CVE-2025-14733WatchGuard Firebox iked Out of Bounds Write Vulnerability WatchGuard Fireware OS Reported fix guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2025-14611Gladinet CentreStack and TrioFox Hard Coded AES Keys Gladinet CentreStack and TrioFox Versions & vendor guidance → |
Known exploitedCISA KEV | 7.1High |
| CVE-2025-14174Google Chromium Out of Bounds Memory Access Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2025-13223Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2025-1316Edimax IC-7100 IP Camera OS Command Injection Edimax IC-7100 IP Camera Reported workaround → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2025-12480Gladinet Triofox Improper Access Control Vulnerability TrioFox TrioFox Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2025-11953Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests React Native Community CLI Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2025-11371Gladinet CentreStack and TrioFox Local File Inclusion Flaw Gladinet CentreStack and TrioFox Reported workaround → |
Known exploitedCISA KEV | 7.5High |
| CVE-2025-10585Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.