RewindexCVEs
CVEs
1,758 matching vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
CVSS 5.5 mediumKEV added EPSS 1.1%
CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 49.0%
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.2%
CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 24.3%
CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 9.5%
CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability
CVSS 5.5 mediumKEV added EPSS 13.4%
CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 4.2%
CVE-2023-28434 MinIO is vulnerable to privilege escalation on Linux/MacOS
CVSS 8.8 highKEV added EPSS 7.9%
CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability
CVSS 5.0 mediumKEV added EPSS 0.39%
CVE-2021-3129 Laravel Ignition File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 33.0%
CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
CVSS 7.5 highKEV added EPSS 99.8%
CVE-2023-26369 [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild
CVSS 7.8 highKEV added EPSS 6.7%
CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2023-35674 Android Framework Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 2.6%
CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
CVSS 5.0 mediumKEV added EPSS 26.6%
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 19.6%
CVE-2023-36802 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 27.9%
CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 53.4%
CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 4.4%
CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.8%
CVE-2023-32315 Openfire administration console authentication bypass
CVSS 8.6 highKEV added EPSS 100.0%
CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
CVSS 7.5 highKEV added EPSS 80.6%
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 17.0%
CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.3%
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
CVSS 7.5 highKEV added EPSS 14.1%
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 63.6%
CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 49.1%
CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability
CVSS 5.5 mediumKEV added EPSS 2.9%
CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 19.0%
CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass
CVSS 7.5 highKEV added EPSS 99.8%
CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2023-36884 Windows Search Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 99.4%
CVE-2022-29303 SolarView Compact Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.0%
CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 15.5%
CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 42.6%
CVE-2023-32049 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 4.2%
CVE-2023-32046 Windows MSHTML Platform Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.0%
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 36.0%
CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 3.0%
CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability
CVSS 3.3 lowKEV added EPSS 0.53%
CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability
CVSS 7.3 highKEV added EPSS 0.63%
CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability
CVSS 6.4 mediumKEV added EPSS 0.37%
CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability
CVSS 6.4 mediumKEV added EPSS 0.40%
CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability
CVSS 6.1 mediumKEV added EPSS 0.80%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)