CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2023-26369[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild Adobe Acrobat Reader Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-26360Adobe ColdFusion Improper Access Control Arbitrary code execution Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2023-26359Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution Adobe ColdFusion Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-26083Arm Mali GPU Kernel Driver Information Disclosure Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 3.3Low |
| CVE-2023-25717Multiple Ruckus Wireless Products CSRF and RCE Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-2533PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF PaperCut PaperCut NG/MF Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2023-25280D-Link DIR-820 Router OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-24955Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-24880Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 4.4Medium |
| CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix Citrix ShareFile Storage Zones Controller Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-23752[20230201] - Core - Improper access check in webservice endpoints Joomla! Project Joomla! CMS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2023-23529Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS and iPadOS, Apple Safari, Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-23397Microsoft Outlook Elevation of Privilege Vulnerability Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Outlook 2016, Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 2019, Microsoft Microsoft Outlook 2013 Service Pack 1 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 20H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-22952Multiple SugarCRM Products Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-22621CVE-2023-22621 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | 10Critical |
| CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-22518Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2023-21823Windows Graphics Component Remote Code Execution Vulnerability Microsoft Microsoft Office for Android, Microsoft Microsoft Office for iOS, Microsoft Microsoft Office for Universal, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 20H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-21715Microsoft Publisher Security Feature Bypass Vulnerability Microsoft Microsoft 365 Apps for Enterprise Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 8.1, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability Adobe Acrobat Reader Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.