CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

6 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-26136	6.5	medium	microsoft / copilot	Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an	170d ago
CVE-2026-26120	6.5	medium	microsoft / bing	Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a n	170d ago
CVE-2026-56164exploited	5.3	medium	microsoft / sharepoint server	Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to ele	53d ago
CVE-2026-24299	5.3	medium	microsoft / 365 copilot	Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unau	170d ago
CVE-2026-0385	5	medium	microsoft / edge chromium	Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability	173d ago
CVE-2026-45498exploited	4	medium	microsoft / defender antimalware platform	Microsoft Defender Denial of Service Vulnerability	108d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker