Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | HIGH | N/A | 27.91% | cvelistv5 | 2023-09-12 |
| cve-2023-36761 | Microsoft Word Information Disclosure Vulnerability | HIGH | N/A | 19.57% | cvelistv5 | 2023-09-12 |
| cve-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | MEDIUM | 5.4 | 3.06% | cvelistv5 | 2023-11-16 |
| cve-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability | MEDIUM | 6.5 | 20.72% | cvelistv5 | 2023-10-10 |
| cve-2023-36424 | Microsoft Windows Out-of-Bounds Read Vulnerability | HIGH | 7.8 | 12.18% | cvelistv5 | 2026-04-13 |
| cve-2023-36144 | CVE-2023-36144 | HIGH | N/A | 36.51% | cvelistv5 | |
| cve-2023-3608 | CVE-2023-3608 | MEDIUM | 5.8 | 12.29% | cvelistv5 | |
| cve-2023-3606 | CVE-2023-3606 | MEDIUM | 6.5 | 7.08% | cvelistv5 | |
| cve-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | HIGH | 7.8 | 16.67% | cvelistv5 | 2023-11-14 |
| cve-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | HIGH | 7.8 | 11.98% | cvelistv5 | 2023-11-14 |
| cve-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | HIGH | N/A | 88.09% | cvelistv5 | 2023-11-14 |
| cve-2023-35885 | CVE-2023-35885 | CRITICAL | 9.8 | 74.89% | cvelistv5 | |
| cve-2023-35844 | CVE-2023-35844 | HIGH | 7.5 | 6.34% | cvelistv5 | |
| cve-2023-35813 | CVE-2023-35813 | HIGH | N/A | 86.69% | cvelistv5 | |
| cve-2023-35674 | Android Framework Privilege Escalation Vulnerability | HIGH | N/A | 2.61% | cvelistv5 | 2023-09-13 |
| cve-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | HIGH | 8.8 | 15.52% | cvelistv5 | 2023-07-11 |
| cve-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | CRITICAL | 9.8 | 99.75% | cvelistv5 | 2023-07-19 |
| cve-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2024-01-18 |
| cve-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | HIGH | 7.2 | 63.58% | cvelistv5 | 2023-07-31 |
| cve-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2023-07-25 |
| cve-2023-35042 | CVE-2023-35042 | HIGH | N/A | 43.23% | cvelistv5 | |
| cve-2023-34993 | CVE-2023-34993 | CRITICAL | 9.6 | 18.15% | cvelistv5 | |
| cve-2023-34960 | CVE-2023-34960 | HIGH | N/A | 99.33% | cvelistv5 | |
| cve-2023-34659 | CVE-2023-34659 | HIGH | N/A | 12.48% | cvelistv5 | |
| cve-2023-34362 | Progress MOVEit Transfer SQL Injection Vulnerability | CRITICAL | 9.8 | 99.93% | cvelistv5 | 2023-06-02 |
| cve-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | CRITICAL | 9.0 | 77.27% | cvelistv5 | 2025-02-25 |
| cve-2023-34133 | CVE-2023-34133 | HIGH | 7.5 | 72.58% | cvelistv5 | |
| cve-2023-34105 | CVE-2023-34105 | HIGH | 7.5 | 8.69% | cvelistv5 | |
| cve-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability | CRITICAL | 9.8 | 99.43% | cvelistv5 | 2024-01-22 |
| cve-2023-33831 | A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request. | CRITICAL | 9.8 | 25.95% | cvelistv5 | 2026-06-17 |