CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2023-21529 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	4.4Medium
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2023-21237 Android Pixel Information Disclosure Vulnerability n/a Android Versions & vendor guidance →	Known exploitedCISA KEV	6.2Medium
CVE-2023-20963 Android Framework Privilege Escalation Vulnerability n/a Android Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability n/a Aria Operations for Networks (Formerly vRealize Network Insight) Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability VMware VMware Tools Versions & vendor guidance →	Known exploitedCISA KEV	3.9Low
CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability Cisco Cisco IOS XE Software Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance →	Known exploitedCISA KEV	5Medium
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco Cisco IOS XE Software Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco IOS, Cisco Cisco IOS XE Software Versions & vendor guidance →	Known exploitedCISA KEV	6.6Medium
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability Sophos Sophos Web Appliance Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability n/a TP-Link Archer AX21 (AX1800) Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection Fortra Goanywhere MFT Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability n/a Kernel Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-0266 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel Linux Linux Kernel Versions & vendor guidance →	Known exploitedCISA KEV	7.9High
CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability Apple tvOS, Apple macOS, Apple iOS and iPadOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability Apple macOS, Apple tvOS, Apple Safari, Apple watchOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2022-47986 IBM Aspera Faspex code execution IBM Aspera Faspex Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2022-46169 Unauthenticated Command Injection Cacti cacti Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016 Versions & vendor guidance →	Known exploitedCISA KEV	5.4Medium

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.