RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers
CVSS 7.7 highEPSS 0.63%Cursor
CVE-2026-73217 Cursor: Sandbox escape via tampered Python virtual environments
CVSS 7.7 highEPSS 0.43%Cursor
CVSS 5.3 mediumEPSS 0.10%Google Cloud
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.83%Microsoft Azure
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
CVSS 8.8 highEPSS 0.61%Microsoft Teams
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.30%Microsoft Azure
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.84%Microsoft Azure
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.80%Microsoft Azure
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.86%Microsoft Azure
CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.92%Microsoft Teams
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 0.33%
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.96%Power BI
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.2 highEPSS 1.0%Microsoft Azure
CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.94%Microsoft Teams
CVE-2026-73086 nanoid: Integer Overflow or Wraparound
CVSS 7.4 highEPSS 0.30%BitbucketConfluenceJira
CVSS 4.5 mediumEPSS 0.10%Google Cloud
CVSS 4.3 mediumEPSS 0.09%Google Cloud
CVSS 5.6 mediumEPSS 0.07%Google Cloud
CVSS 7.2 highEPSS 0.13%Google Cloud
CVSS 7.2 highEPSS 0.15%Google Cloud
CVSS 5.3 mediumEPSS 0.12%Google Cloud
CVSS 4.5 mediumEPSS 0.10%Google Cloud
CVSS 5.3 mediumEPSS 0.13%Google Cloud
CVE-2026-53416 Zoom VDI - Path Traversal
CVSS 7.1 highEPSS 0.21%Zoom
CVE-2026-53415 Zoom Clients - Use After Free
CVSS 8.3 highEPSS 0.49%Zoom
CVE-2026-53414 Zoom Clients - Buffer Over-read
CVSS 6.5 mediumEPSS 0.36%Zoom
CVE-2026-53413 Zoom Clients - Buffer Over-write
CVSS 8.3 highEPSS 0.49%Zoom
CVE-2026-6726 An information leakage vulnerability in the TCG TPM 2.0 reference code.
CVSS 7.9 highEPSS 0.19%Google Cloud
CVE-2026-19516 CVE-2026-19516 CVE Record
CVSS 9.1 criticalEPSS 0.31%Grafana Cloud
CVE-2026-72898 Metabase SQL injection via password reset endpoint
CVSS 10.0 criticalKEV added EPSS 98.6%MetabaseMetabase Cloud
CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion
CVSS 9.3 criticalEPSS 0.46%Firecrawl
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
CVSS 7.1 highEPSS 0.19%Hugging Face
CVE-2026-14886 Vault Enterprise vulnerable to cross-namespace entity deletion
CVSS 8.2 highEPSS 0.33%HashiCorp
CVE-2026-72900 Metabase information exposure
CVSS 6.5 mediumEPSS 0.40%MetabaseMetabase Cloud
CVE-2026-72899 Metabase SQL injection via public card or dashboard
CVSS 10.0 criticalEPSS 0.79%MetabaseMetabase Cloud
CVE-2026-12624 Vault vulnerable to LIST authorization bypass via trailing-slash strip
CVSS 4.3 mediumEPSS 0.27%HashiCorp
CVE-2026-71959 Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect
CVSS 5.8 mediumEPSS 0.48%Bitwarden
CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing
CVSS 5.3 mediumEPSS 0.40%HashiCorp
CVE-2026-15970 L7 intention authorization bypass via custom public listener
CVSS 4.2 mediumEPSS 0.21%HashiCorp
CVE-2026-19017 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
CVSS 6.8 mediumEPSS 0.46%HashiCorp
CVE-2026-19015 Uncontrolled resource consumption in the Consul Connect CA roots endpoint
CVSS 5.3 mediumEPSS 0.40%HashiCorp
CVE-2026-19014 Uncontrolled resource consumption in the Consul Connect authorization endpoint
CVSS 4.3 mediumEPSS 0.36%HashiCorp
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)