CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2024-4978Malicious Code in Justice AV Solutions (JAVS) Viewer Justice AV Solutions Viewer Versions & vendor guidance → |
Known exploitedCISA KEV | 8.7High |
| CVE-2024-4947Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-49039Windows Task Scheduler Elevation of Privilege Vulnerability Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 11 Version 24H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-49035Partner.Microsoft.Com Elevation of Privilege Vulnerability Microsoft Microsoft Partner Center Versions & vendor guidance → |
Known exploitedCISA KEV | 8.7High |
| CVE-2024-4885WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability Progress Software Corporation WhatsUp Gold Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-4879Jelly Template Injection Vulnerability in ServiceNow UI Macros ServiceNow Now Platform Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2024-48248NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO Backup & Replication Director Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.3High |
| CVE-2024-47575Fortinet FortiManager Missing Authentication Vulnerability Fortinet FortiManager Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2024-4610Mali GPU Kernel Driver allows improper GPU memory processing operations Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver Reported fix guidance → |
Known exploitedCISA KEV | 7.4High |
| CVE-2024-4577Argument Injection in PHP-CGI PHP Group PHP Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2024-45195Apache OFBiz: Confused controller-view authorization logic (forced browsing) Apache Software Foundation Apache OFBiz Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-44309Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS Versions & vendor guidance → |
Known exploitedCISA KEV | 6.3Medium |
| CVE-2024-44308Apple Multiple Products Code Execution Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-4358Registration Authentication Bypass Vulnerability Progress Software Corporation Telerik Report Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-43573Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2024-43572Microsoft Management Console Remote Code Execution Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-43468Microsoft Configuration Manager Remote Code Execution Vulnerability Microsoft Microsoft Configuration Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-43461Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-43451NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 11 Version 24H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2024-43093Android Framework Privilege Escalation Vulnerability Google Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2024-43047Use After Free in DSP Service Qualcomm, Inc. Snapdragon Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.