RewindexCVEs
CVEs
5,687 vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability
CVSS 7.8 highKEV added EPSS 78.9%
CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.8%
CVE-2010-1428 Red Hat JBoss Information Disclosure Vulnerability
CVSS 5.9 mediumKEV added EPSS 52.7%
CVE-2010-0840 Oracle JRE Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2010-0738 Red Hat JBoss Authentication Bypass Vulnerability
CVSS 3.7 lowKEV added EPSS 73.8%
CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 4.2%
CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability
CVSS 6.1 mediumKEV added EPSS 30.5%
CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting Vulnerability
CVSS 8.0 highKEV added EPSS 22.7%
CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.2%
CVE-2017-8291 Artifex Ghostscript Type Confusion Vulnerability
CVSS 7.8 highKEV added EPSS 97.0%
CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.8%
CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 22.3%
CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 29.2%
CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 99.7%
CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 18.1%
CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 11.0%
CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 22.6%
CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 87.6%
CVE-2016-4657 Apple iOS Webkit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 66.8%
CVE-2016-4656 Apple iOS Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 23.6%
CVE-2016-4655 Apple iOS Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 33.4%
CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 26.5%
CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 33.3%
CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability
CVSS 4.3 mediumKEV added EPSS 21.9%
CVE-2021-30883 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 14.7%
CVE-2021-1048 Android Kernel Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 1.1%
CVE-2021-0920 Android Kernel Race Condition Vulnerability
CVSS 6.4 mediumKEV added EPSS 0.87%
CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 4.7%
CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 2.4%
CVE-2019-7287 Apple iOS Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 4.6%
CVE-2019-7286 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 15.9%
CVE-2019-5786 Google Chrome Blink Use-After-Free Vulnerability
CVSS 6.5 mediumKEV added EPSS 61.1%
CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability
CVSS 8.2 highKEV added EPSS 67.9%
CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.6%
CVE-2019-13720 Google Chrome WebAudio Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 49.4%
CVE-2019-11708 Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
CVSS 10.0 criticalKEV added EPSS 55.9%
CVE-2019-11707 Mozilla Firefox and Thunderbird Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 38.0%
CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.7%
CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 2.3%
CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 9.4%
CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 8.1%
CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.0%
CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 24.4%
CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.3%
CVE-2022-1388 F5 BIG-IP Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2021-1789 Apple Multiple Products Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 14.0%
CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 16.2%
CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 86.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)