CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2024-42009RoundCube Webmail Cross-Site Scripting Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2024-41713Mitel MiCollab Path Traversal Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2024-41710Mitel SIP Phones Argument Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.8Medium |
| CVE-2024-40891Zyxel DSL CPE OS Command Injection Vulnerability Zyxel VMG4325-B10A firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-40890Zyxel DSL CPE OS Command Injection Vulnerability Zyxel VMG4325-B10A firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability SonicWall SonicOS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2024-40711Veeam Backup and Replication Deserialization Vulnerability Veeam Backup and Recovery Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-4040Unauthenticated arbitrary file read and remote code execution in CrushFTP CrushFTP CrushFTP Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-39891Twilio Authy Information Disclosure Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2024-39717Versa Director Dangerous File Type Upload Vulnerability Versa Director Versions & vendor guidance → |
Known exploitedCISA KEV | 6.6Medium |
| CVE-2024-38856Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code Apache Software Foundation Apache OFBiz Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2024-38813Privilege escalation vulnerability n/a VMware vCenter Server, n/a VMware Cloud Foundation Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-38812Heap-overflow vulnerability n/a VMware vCenter Server, n/a VMware Cloud Foundation Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-38475Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. Apache Software Foundation Apache HTTP Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2024-38226Microsoft Publisher Security Feature Bypass Vulnerability Microsoft Microsoft Office 2019, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Publisher 2016 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2024-38217Windows Mark of the Web Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 5.4Medium |
| CVE-2024-38213Windows Mark of the Web Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2024-38193Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft Windows 11 Version 24H2, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-38189Microsoft Project Remote Code Execution Vulnerability Microsoft Microsoft Office 2019, Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Project 2016, Microsoft Microsoft Office LTSC 2021 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-38178Scripting Engine Memory Corruption Vulnerability Microsoft Windows 11 Version 24H2, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-38112Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows 10 Version 22H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 10 Version 1507, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows 10 Version 21H2, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012 R2, Microsoft Windows 11 version 22H3, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 11 version 21H2, Microsoft Windows Server 2019 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-38107Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows 11 Version 24H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-38106Windows Kernel Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 11 Version 24H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2024-38094Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2024-38080Windows Hyper-V Elevation of Privilege Vulnerability Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.