CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability Red Hat, Inc. jbossas Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability Microsoft Corporation Microsoft Office Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability Microsoft Corporation Microsoft Office Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability Microsoft Corporation Microsoft Outlook Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-11292 Adobe Flash Player Type Confusion Vulnerability n/a Adobe Flash Player version 27.0.0.159 and earlier Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability Microsoft Corporation Microsoft Windows Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability Microsoft Corporation Microsoft Office Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability Microsoft Corporation Microsoft Office Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability Microsoft Corporation Windows COM Versions & vendor guidance →	Known exploitedCISA KEV	7.3High
CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft Corporation Office/WordPad Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Corporation Internet Explorer Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft Corporation Windows SMB Versions & vendor guidance →	Known exploitedCISA KEV	7.5High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.