RewindexCVEs
CVEs
5,687 vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2013-0641 Adobe Reader Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 32.3%
CVE-2013-0640 Adobe Reader and Acrobat Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 86.9%
CVE-2013-0632 Adobe ColdFusion Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.1%
CVE-2012-4681 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.5%
CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 72.0%
CVE-2012-1723 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 70.4%
CVE-2012-0507 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.2%
CVE-2011-3544 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 49.0%
CVE-2011-0611 Adobe Flash Player Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 99.4%
CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 89.4%
CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability
CVSS 7.8 highKEV added EPSS 28.7%
CVE-2010-0188 Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 88.2%
CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 84.0%
CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 4.9%
CVE-2008-3431 Oracle VirtualBox Insufficient Input Validation Vulnerability
CVSS 8.8 highKEV added EPSS 6.9%
CVE-2008-2992 Adobe Reader and Acrobat Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 99.8%
CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 7.2%
CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 4.9%
CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
CVSS 6.1 mediumKEV added EPSS 30.9%
CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 89.9%
CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 29.6%
CVE-2014-6352 Microsoft Windows Code Injection Vulnerability
CVSS 7.8 highKEV added EPSS 77.5%
CVE-2022-23134 Possible view of the setup pages by unauthenticated users if config file already exists
CVSS 3.7 lowKEV added EPSS 95.3%
CVE-2022-23131 Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
CVSS 9.1 criticalKEV added EPSS 95.7%
CVE-2022-24086 Adobe Commerce checkout improper input validation leads to remote code execution
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability
CVSS 7.5 highKEV added EPSS 81.7%
CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
CVSS 7.5 highKEV added EPSS 88.2%
CVE-2018-20250 WinRAR Absolute Path Traversal Vulnerability
CVSS 7.8 highKEV added EPSS 96.0%
CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 89.6%
CVE-2017-9841 PHPUnit Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 77.7%
CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 84.9%
CVE-2021-4102 Google Chromium V8 Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 7.8%
CVE-2021-36934 Windows Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 67.3%
CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 90.0%
CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 100.0%
CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 10.0%
CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 81.0%
CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 89.9%
CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 99.2%
CVE-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.5%
CVE-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 97.1%
CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2015-1130 Apple OS X Authentication Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 9.9%
CVE-2014-4404 Apple OS X Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 48.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)