RewindexCVEs
CVEs
1,764 matching vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2021-34523 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2021-34448 Scripting Engine Memory Corruption Vulnerability
CVSS 6.8 mediumKEV added EPSS 40.1%
CVE-2021-33771 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.2%
CVE-2021-33742 Windows MSHTML Platform Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 59.4%
CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS 8.4 highKEV added EPSS 6.6%
CVE-2021-31979 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.5%
CVE-2021-31956 Windows NTFS Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 22.3%
CVE-2021-31955 Windows Kernel Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 81.1%
CVE-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.5%
CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability
CVSS 6.6 mediumKEV added EPSS 99.8%
CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVSS 5.2 mediumKEV added EPSS 2.6%
CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVSS 5.2 mediumKEV added EPSS 3.0%
CVE-2021-30869 Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
CVSS 7.8 highKEV added EPSS 4.1%
CVE-2021-30860 Apple Multiple Products Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 76.0%
CVE-2021-30858 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 13.4%
CVE-2021-30807 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 28.8%
CVE-2021-30762 Apple iOS WebKit Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 11.0%
CVE-2021-30761 Apple iOS WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 10.5%
CVE-2021-30713 Apple macOS Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 7.0%
CVE-2021-30666 Apple iOS WebKit Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 3.0%
CVE-2021-30665 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 3.7%
CVE-2021-30663 Apple Multiple Products WebKit Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 3.5%
CVE-2021-30661 Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 4.5%
CVE-2021-30657 Apple macOS Unspecified Vulnerability
CVSS 5.5 mediumKEV added EPSS 68.5%
CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 33.2%
CVE-2021-30632 Google Chromium V8 Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 63.2%
CVE-2021-30563 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 9.0%
CVE-2021-30554 Google Chromium WebGL Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 7.4%
CVE-2021-30551 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 64.7%
CVE-2021-30116 Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6
CVSS 10.0 criticalKEV added EPSS 85.7%
CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
CVSS 8.8 highKEV added EPSS 5.4%
CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 12.1%
CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
CVSS 9.6 criticalKEV added EPSS 51.9%
CVE-2021-28310 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 8.4%
CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability
CVSS 5.5 mediumKEV added EPSS 3.1%
CVE-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.9%
CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 56.7%
CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added EPSS 11.4%
CVE-2021-27102 Accellion FTA OS Command Injection Vulnerability
CVSS 7.8 highKEV added EPSS 3.7%
CVE-2021-27101 Accellion FTA SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 6.0%
CVE-2021-27085 Internet Explorer Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 5.4%
CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.9%
CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability
CVSS 7.6 highKEV added EPSS 6.1%
CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 93.7%
CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 95.8%
CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2021-26411 Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 81.7%
CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%Confluence
CVE-2021-23874 McAfee Total Protection (MTP) privilege escalation vulnerability
CVSS 8.2 highKEV added EPSS 1.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)