CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2023-32046Windows MSHTML Platform Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-3079Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-29492Novi Survey Insecure Deserialization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-29360Microsoft Streaming Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft Microsoft SharePoint Server 2019 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-29336Win32k Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-29298Adobe ColdFusion Improper Access Control Security feature bypass Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-28771Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel ZyWALL/USG series firmware, Zyxel VPN series firmware, Zyxel USG FLEX series firmware, Zyxel ATP series firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-2868Remote Code injection in Barracuda Email Security Gateway Barracuda Barracuda Email Security Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.4Critical |
| CVE-2023-28461Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-28434MinIO is vulnerable to privilege escalation on Linux/MacOS minio minio Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-28432Minio Information Disclosure in Cluster Deployment minio minio Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-28229Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2023-28206Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability Apple iOS and iPadOS, Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2023-28205Apple Multiple Products WebKit Use-After-Free Vulnerability Apple iOS and iPadOS, Apple Safari, Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-28204Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple macOS, Apple Safari, Apple watchOS, Apple iOS and iPadOS, Apple tvOS Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Fortinet FortiOS-6K7K, Fortinet FortiProxy, Fortinet FortiOS Reported fix guidance → |
Known exploitedCISA KEV | 9.2Critical |
| CVE-2023-27992Zyxel Multiple NAS Devices Command Injection Vulnerability Zyxel NAS326 firmware, Zyxel NAS540 firmware, Zyxel NAS542 firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability n/a Veeam Backup & Replication Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-27524Apache Superset: Session validation vulnerability when using provided default SECRET_KEY Apache Software Foundation Apache Superset Versions & vendor guidance → |
Known exploitedCISA KEV | 8.9High |
| CVE-2023-27351PaperCut NG/MF Improper Authentication Vulnerability PaperCut NG Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2023-27350PaperCut MF/NG Improper Access Control Vulnerability PaperCut NG Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.