CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2020-0968Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer 9, Microsoft Internet Explorer 11, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows Server 2012 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0878Microsoft Browser Memory Corruption Vulnerability Microsoft ChakraCore, Microsoft Microsoft Edge (EdgeHTML-based), Microsoft Internet Explorer 9, Microsoft Internet Explorer 11 Versions & vendor guidance → |
Known exploitedCISA KEV | 4.2Medium |
| CVE-2020-0796Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0688Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2020-0683Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows 10 Version 1909 for ARM64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0674Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Microsoft Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Internet Explorer 11 on Windows Server 2012, Microsoft Internet Explorer 9 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2020-0646Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation), Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems, Microsoft Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft Microsoft .NET Framework 4.8 on Windows RT 8.1, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation), Microsoft Microsoft .NET Framework 4.6, Microsoft Microsoft .NET Framework 3.0, Microsoft Microsoft .NET Framework 3.5, Microsoft Microsoft .NET Framework 3.5.1, Microsoft Microsoft .NET Framework 4.5.2, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation), Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-0638Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft Windows, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows Server, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1909 for ARM64-based Systems Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0618Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft Microsoft SQL Server, Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU), Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2020-0601Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft Windows, Microsoft Windows Server, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1909 for 32-bit Systems, Microsoft Windows 10 Version 1909 for x64-based Systems, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1909 for ARM64-based Systems Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2020-0069Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2020-0041Android Kernel Out-of-Bounds Write Vulnerability n/a Android Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-9978WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2019-9875Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-9874Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2019-9082ThinkPHP Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-8720WebKitGTK Memory Corruption Vulnerability n/a webkitgtk Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-8605Apple Multiple Products Use-After-Free Vulnerability Apple iOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-8526Apple macOS Use-After-Free Vulnerability Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2019-8506Apple Multiple Products Type Confusion Vulnerability Apple iOS, Apple tvOS, Apple watchOS, Apple Safari, Apple iTunes for Windows, Apple iCloud for Windows Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2019-8394Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.