CVE watch Past 48 hours+

Latest 48 of 896 in cacheBrowse CVEs
NVD checked Nov 6, 15:23 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,321–1,344 of 1,768

CISA KEV

CVE-2017-6740: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-6739: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-6663: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Software

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-6627: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Software

A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12319: Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

Cisco · IOS XE Software

A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially…

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12240: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12238: Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

Cisco · Catalyst 6800 Series Switches

A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12237: Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Software

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a…

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12235: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

Cisco · IOS software

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12234: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco · IOS software

There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12233: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco · IOS software

There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-12232: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

Cisco · IOS software

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-11826: Microsoft Office Remote Code Execution Vulnerability

Microsoft · Office

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

CISA KEV

CVE-2017-0001: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft · Graphics Device Interface (GDI)

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to…

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

Source: Official CISA KEV JSONCatalog released Nov 4, 2026, 8:00 PM GMT+0000Site snapshot: Showing 24 of 1,768Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 553–576 of 1,125

NVD CVE

CVE-2022-44508

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44507

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44506

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44505

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44504

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44503

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44501

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44497

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44496

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44495

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44494

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44493

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44492

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44491

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44490

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44489

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44487

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44486

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44485

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44484

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44483

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44482

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44481

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
NVD CVE

CVE-2022-44480

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected
Source: Official NVD CVE API 2.0UTC window Nov 4, 2026 15:23–Nov 6, 2026 15:23API response: Site snapshot: Showing 24 of 1,125Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours