Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
419,343 CVEs1,768 in CISA KEV17,514 with EPSS ≥ 10%25,055 with a public exploitUpdated 5 November 2026
17,514 results · page 180 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2017-0140 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0066 and… | MEDIUM 4.2EPSS 28.5% | 17 March 2017 |
| CVE-2017-0138 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0137 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0136 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0134 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 26.4% | 17 March 2017 |
| CVE-2017-0133 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 26.0% | 17 March 2017 |
| CVE-2017-0132 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0131 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0130 | The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This… | HIGH 7.5EPSS 23.3% | 17 March 2017 |
| CVE-2017-0128 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0127 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0126 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0125 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0124 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0123 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0122 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0121 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain… | EXPLOIT ✓MEDIUM 4.3EPSS 42.1% | 17 March 2017 |
| CVE-2017-0120 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe Information Disclosure… | EXPLOIT ✓MEDIUM 4.3EPSS 22.0% | 17 March 2017 |
| CVE-2017-0119 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0118 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain… | EXPLOIT ✓MEDIUM 4.3EPSS 23.0% | 17 March 2017 |
| CVE-2017-0117 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0116 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0115 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0114 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0113 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0112 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0111 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0108 | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows… | EXPLOIT ✓HIGH 7.8EPSS 50.5% | 17 March 2017 |
| CVE-2017-0105 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from… | MEDIUM 5.5EPSS 30.4% | 17 March 2017 |
| CVE-2017-0104 | The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability." | HIGH 8.1EPSS 13.8% | 17 March 2017 |
| CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | KEVEXPLOITHIGH 7.8EPSS 57.5% | 17 March 2017 |
| CVE-2017-0094 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 31.7% | 17 March 2017 |
| CVE-2017-0092 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0091 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0090 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 42.5% | 17 March 2017 |
| CVE-2017-0089 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 57.3% | 17 March 2017 |
| CVE-2017-0088 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." | EXPLOIT ✓HIGH 8.8EPSS 41.9% | 17 March 2017 |
| CVE-2017-0087 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 42.5% | 17 March 2017 |
| CVE-2017-0086 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 42.5% | 17 March 2017 |
| CVE-2017-0085 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability."… | EXPLOIT ✓MEDIUM 4.3EPSS 22.5% | 17 March 2017 |
| CVE-2017-0084 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute… | EXPLOIT ✓HIGH 8.8EPSS 36.5% | 17 March 2017 |
| CVE-2017-0083 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 42.5% | 17 March 2017 |
| CVE-2017-0075 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS… | HIGH 7.6EPSS 12.7% | 17 March 2017 |
| CVE-2017-0073 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain… | MEDIUM 4.3EPSS 33.4% | 17 March 2017 |
| CVE-2017-0072 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is… | EXPLOIT ✓HIGH 8.8EPSS 42.5% | 17 March 2017 |
| CVE-2017-0071 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 31.9% | 17 March 2017 |
| CVE-2017-0070 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | EXPLOIT ✓HIGH 7.5EPSS 78.5% | 17 March 2017 |
| CVE-2017-0068 | Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in… | MEDIUM 4.3EPSS 15.2% | 17 March 2017 |
| CVE-2017-0067 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. | HIGH 7.5EPSS 15.2% | 17 March 2017 |
| CVE-2017-0066 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and… | MEDIUM 4.2EPSS 29.9% | 17 March 2017 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.