RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-5281 Google Dawn Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 13.5%
CVE-2026-3055 Insufficient input validation leading to memory overread
CVSS 9.8 criticalKEV added EPSS 91.5%
CVE-2025-53521 BigIP APM Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.3%
CVE-2026-33634 Trivy ecosystem supply chain briefly compromised
CVSS 8.8 highKEV added EPSS 59.7%
CVE-2026-33017 Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
CVSS 9.8 criticalKEV added EPSS 96.2%
CVE-2025-54068 Livewire vulnerable to remote command execution during property update hydration
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability
CVSS 5.5 mediumKEV added EPSS 0.43%
CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability
CVSS 7.8 highKEV added EPSS 0.36%
CVE-2025-32432 Craft CMS Allows Remote Code Execution
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 1.7%
CVE-2026-20131 Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 43.2%
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.2%
CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
CVSS 7.2 highKEV added EPSS 20.2%
CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability
CVSS 4.3 mediumKEV added EPSS 62.5%
CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
CVSS 8.8 highKEV added EPSS 2.7%
CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 2.3%
CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection
CVSS 10.0 criticalKEV added EPSS 99.0%n8n
CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
CVSS 8.6 highKEV added EPSS 88.3%
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.1%
CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery
CVSS 7.5 highKEV added EPSS 99.7%
CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 4.0%
CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 2.0%
CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability
CVSS 8.8 highKEV added EPSS 7.0%
CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 63.6%
CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2026-22719 VMware Aria Operations command injection vulnerability
CVSS 8.1 highKEV added EPSS 18.3%
CVE-2026-21385 Integer Overflow or Wraparound in Graphics
CVSS 7.8 highKEV added EPSS 1.3%
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 89.3%
CVE-2022-20775 Cisco SD-WAN Software Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 12.5%
CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 5.2%
CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability
CVSS 7.2 highKEV added EPSS 27.4%
CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability
CVSS 9.9 criticalKEV added EPSS 99.7%
CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
CVSS 10.0 criticalKEV added EPSS 13.5%
CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability
CVSS 6.8 mediumKEV added EPSS 53.4%GitLab
CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 55.0%
CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
CVSS 7.2 highKEV added EPSS 1.8%
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 76.6%
CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 93.1%
CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 1.7%
CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability
CVSS 8.1 highKEV added EPSS 73.6%
CVE-2025-15556 Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
CVSS 7.5 highKEV added EPSS 1.8%
CVE-2024-43468 Microsoft Configuration Manager Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 81.0%
CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability
CVSS 6.2 mediumKEV added EPSS 4.8%
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 61.2%
CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 15.9%
CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.1%
CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.5%
CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVSS 9.8 criticalKEV added EPSS 88.2%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)