CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2023-46604 Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack Apache Software Foundation Apache ActiveMQ, Apache Software Foundation Apache ActiveMQ Legacy OpenWire Module Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid Corporation Proself Enterprise/Standard Edition, North Grid Corporation Proself Gateway Edition, North Grid Corporation Proself Mail Sanitize Edition Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis Acronis Cyber Infrastructure Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2023-43619 CVE-2023-43619 n/a n/a Versions & vendor guidance →	Not in downloaded KEV	Unknown
CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association KNX Protocol Connection Authorization Option 1 Reported workaround →	Known exploitedCISA KEV	7.5High
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple macOS, Apple iOS and iPadOS, Apple Safari Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple Safari, Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple Safari, Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability Apple iOS and iPadOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability Apple iOS and iPadOS, Apple tvOS, Apple macOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-41763 Skype for Business Elevation of Privilege Vulnerability Microsoft Skype for Business Server 2015 CU13, Microsoft Skype for Business Server 2019 CU7 Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2023-41266 Qlik Sense Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro, Inc. Trend Micro Apex One, Trend Micro, Inc. Trend Micro Worry-Free Business Security, Trend Micro, Inc. Trend Micro Worry-Free Business Security Services Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.