CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-125135HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-125134Windows Function Discovery Resource Publication Remote Code Execution Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-125125compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error message tmatens compose-lint Versions & vendor guidance → |
Not in downloaded KEV | 2.3Low |
| CVE-2026-125123compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messages tmatens compose-lint Versions & vendor guidance → |
Not in downloaded KEV | 2.3Low |
| CVE-2026-124916PrestaShop Performance Debug Configuration PHP Code Injection PrestaShop PrestaShop Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2026-124586Tencent RapidJSON diyfp.h GetCachedPowerByIndex out-of-bounds Tencent RapidJSON Versions & vendor guidance → |
Not in downloaded KEV | 6.9Medium |
| CVE-2026-124499Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injection Fengoffice Feng Office Versions & vendor guidance → |
Not in downloaded KEV | 5.1Medium |
| CVE-2026-124498Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scripting Convene Azeus Convene Board Management Portal Versions & vendor guidance → |
Not in downloaded KEV | 5.1Medium |
| CVE-2026-124317libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16 libexpat libexpat Versions & vendor guidance → |
Not in downloaded KEV | 6.3Medium |
| CVE-2026-124194Microsoft Outlook Spoofing Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024 Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2026-124185Microsoft Office Word Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024 Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-124170Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-12411Broken Access Control in Canonical LXD DevLXD API Canonical lxd Reported fix guidance → |
Not in downloaded KEV | 8.4High |
| CVE-2026-12389CVE-2026-12389 Axis Communications AB AXIS Camera Station Pro Versions & vendor guidance → |
Not in downloaded KEV | 8.4High |
| CVE-2026-123218IBM Aspera Faspex Authorization Bypass IBM Aspera Faspex Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-123158OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability OpenBSD OpenSSH Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 5.5Medium |
| CVE-2026-122194Microsoft Defender Remote Code Execution Vulnerability Microsoft Microsoft Malware Protection Engine Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-122175Windows Autopilot Elevation of Privilege Vulnerability Microsoft Windows 11 version 26H1 Versions & vendor guidance → |
Not in downloaded KEV | 7High |
| CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 6.8Medium |
| CVE-2026-121690CVE-2026-121690 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121689CVE-2026-121689 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121688CVE-2026-121688 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121687CVE-2026-121687 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2026-121686CVE-2026-121686 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.