Skip to content
COOEY
CVE → FEDRAMP EXPOSURE
203 correlated CVEs

Actively-exploited / critical CVEs correlated to FedRAMP-authorized products, read by dex — the gist, which products are hit, and what to do. Sorted with those under active attack (CISA KEV) first. Click a CVE for full detail.

1035
Correlated CVEs
856
Under active attack
275
Critical
750
High
587
RCE
All · 1035 Critical · 275 High · 750 On CISA KEV · 856 NVD · 203
Critical NVD 2026-06-18

CVE-2026-11718

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-18

CVE-2026-11717

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-09

CVE-2026-10523

AFFECTS 2 Ivanti Neurons for ITSM (Formerly Service Manager)Ivanti Neurons for MDM (Formerly MobileIron)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-09

CVE-2026-34691

AFFECTS 14 Adobe Acrobat Sign for GovernmentAdobe AnalyticsAdobe CampaignAdobe Connect Managed Services (ACMS-GC)Adobe Creative Cloud for EnterpriseAdobe Document Cloud (PDF Services & Adobe Sign) +8 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-09

CVE-2026-47928

AFFECTS 8 Adobe Acrobat Sign for GovernmentAdobe AnalyticsAdobe CampaignAdobe Connect Managed Services (ACMS-GC)Adobe Creative Cloud for EnterpriseAdobe Document Cloud (PDF Services & Adobe Sign) +2 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-48567

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-11120

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-11113

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-11029

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10990

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10974

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10972

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10971

AFFECTS 6 Azure Commercial CloudAzure Government (includes Dynamics 365)Google Services (Google Cloud Platform Products and underlying Infrastructure)Google WorkspaceMicrosoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10966

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-10931

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-06-04

CVE-2026-11002

AFFECTS 2 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google Workspace

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41277

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41276

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41275

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41274

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41273

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41272

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41270

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41269

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41268

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-28

CVE-2026-9874

AFFECTS 6 Azure Commercial CloudAzure Government (includes Dynamics 365)Google Services (Google Cloud Platform Products and underlying Infrastructure)Google WorkspaceMicrosoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-47280

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-33843

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-40412

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-23652

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-20

CVE-2026-20223

AFFECTS 9 AppDynamics GovAPMCisco Cloudlock for GovernmentCisco Meraki for GovernmentCisco SD-WAN for GovernmentCisco Umbrella for GovernmentCisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) +3 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-13

CVE-2026-0264

AFFECTS 1 Mendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-13

CVE-2026-0258

AFFECTS 1 Mendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-14

CVE-2026-34615

AFFECTS 12 Adobe Acrobat Sign for GovernmentAdobe AnalyticsAdobe CampaignAdobe Connect Managed Services (ACMS-GC)Adobe Creative Cloud for EnterpriseAdobe Document Cloud (PDF Services & Adobe Sign) +6 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-32213

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-33105

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-33107

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-32186

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-01-23

CVE-2026-24304

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2025-09-24

CVE-2025-10585

AFFECTS 3 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google WorkspaceMendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

◀ PREV PAGE 02 / 06 NEXT ▶