CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2024-27834Apple Multiple Products Improper Authentication Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2024-27348Apache HugeGraph-Server: Command execution in gremlin Apache Software Foundation Apache HugeGraph-Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-27199JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains TeamCity Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2024-27198JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-26169Windows Error Reporting Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-24919Information disclosure checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2024-23897Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins Project Jenkins Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-23692Rejetto HTTP File Server 2.3m Unauthenticated RCE Rejetto HTTP File Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-23296Apple Multiple Products Memory Corruption Vulnerability Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-23225Apple Multiple Products Memory Corruption Vulnerability Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-23222Apple Multiple Products WebKit Type Confusion Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-23113Fortinet Multiple Products Format String Vulnerability Fortinet FortiSwitchManager, Fortinet FortiOS, Fortinet FortiPAM, Fortinet FortiProxy Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2024-21762Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet FortiOS, Fortinet FortiProxy Reported fix guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2024-21413Microsoft Outlook Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 2016, Microsoft Microsoft Office 2019, Microsoft Microsoft Office LTSC 2021 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21412Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2024-21410Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-21351Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.6High |
| CVE-2024-21338Windows Kernel Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle Corporation Oracle Agile PLM Framework Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle Corporation Agile PLM Framework Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-20767ColdFusion | Improper Access Control (CWE-284) Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 7.4High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.