Exploited Vulnerabilities

What to patch first · CISA Known Exploited Vulnerabilities with FIRST EPSS scores (Nov 10) and mentions in Asia-Pacific coverage
1779
Known exploited
38
Added · 30d
361
Used by ransomware
67
In APAC news · 90d
67 CVEs
CVEVendor · productAdded to KEVDue EPSSAPAC news
CVE-2026-59823 not in KEV — — 0.4% 1
last Oct 19
CVE-2026-76964 not in KEV — — 0.4% 1
last Nov 12
CVE-2026-89126 not in KEV — — 0.4% 1
last Nov 12
CVE-2026-58868 not in KEV — — 0.4% 1
last Nov 9
CVE-2026-89103 not in KEV — — 0.3% 1
last Nov 12
CVE-2026-120017 not in KEV — — 0.3% 1
last Nov 12
CVE-2026-113963 not in KEV — — 0.1% 1
last Nov 11
CVE-2026-124194
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action…
Microsoft · Office Nov 10, 2026 Nov 24, 2026 — 1
last Nov 12
CVE-2026-125350
Google Chromium Use-After-Free Vulnerability
Google · Chromium Nov 10, 2026 Nov 24, 2026 — 1
last Nov 12
CVE-2026-115560 not in KEV — — — 1
last Oct 26
CVE-2026-115881 not in KEV — — — 1
last Nov 9
CVE-2026-115884 not in KEV — — — 1
last Nov 9
CVE-2026-121166 not in KEV — — — 1
last Nov 12
CVE-2026-121352 not in KEV — — — 1
last Nov 12
CVE-2026-121356 not in KEV — — — 1
last Nov 12
CVE-2026-123039 not in KEV — — — 1
last Nov 12
CVE-2026-44748 not in KEV — — — 1
last Nov 12
← Prev 2 / 2

Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.