RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 67.8%
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.9%
CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.2%Confluence
CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 13.9%
CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 24.7%
CVE-2022-22047 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 18.8%
CVE-2022-26925 Windows LSA Spoofing Vulnerability
CVSS 8.1 highKEV added EPSS 10.5%
CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
CVSS 7.8 highKEV added EPSS 94.9%
CVE-2021-30983 Apple iOS and iPadOS Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 2.9%
CVE-2021-30533 Google Chromium PopupBlocker Security Bypass Vulnerability
CVSS 6.5 mediumKEV added EPSS 16.7%
CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 3.2%
CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 14.8%
CVE-2019-8605 Apple Multiple Products Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 17.6%
CVE-2018-4344 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 2.4%
CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.2%
CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 36.9%
CVE-2016-2388 SAP NetWeaver Information Disclosure Vulnerability
CVSS 5.3 mediumKEV added EPSS 52.2%
CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 71.5%
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.3%
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.7%
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.4%
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.1%
CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability
CVSS 6.5 mediumKEV added EPSS 55.9%
CVE-2019-15271 Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability
CVSS 8.8 highKEV added EPSS 5.5%
CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 60.3%
CVE-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability
CVSS 8.8 highKEV added EPSS 35.9%
CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 35.6%
CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 84.6%
CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 45.7%
CVE-2017-5070 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 32.1%
CVE-2017-5030 Google Chromium V8 Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 40.6%
CVE-2016-5198 Google Chromium V8 Out-of-Bounds Memory Vulnerability
CVSS 8.8 highKEV added EPSS 34.2%
CVE-2016-1646 Google Chromium V8 Out-of-Bounds Read Vulnerability
CVSS 8.8 highKEV added EPSS 48.1%
CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 79.8%
CVE-2012-5054 Adobe Flash Player Integer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 21.2%
CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.1 highKEV added EPSS 80.3%
CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 83.5%
CVE-2012-0767 Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 6.2%
CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 91.1%
CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 87.7%
CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 88.6%
CVE-2011-0609 Adobe Flash Player Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 63.5%
CVE-2010-2883 Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
CVSS 7.3 highKEV added EPSS 81.4%
CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 58.6%
CVE-2010-1297 Adobe Flash Player Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 82.5%
CVE-2009-4324 Adobe Acrobat and Reader Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 81.9%
CVE-2009-3953 Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 83.2%
CVE-2009-1862 Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 21.2%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)