Skip to content
COOEY
CVE → FEDRAMP EXPOSURE
275 correlated CVEs

Actively-exploited / critical CVEs correlated to FedRAMP-authorized products, read by dex — the gist, which products are hit, and what to do. Sorted with those under active attack (CISA KEV) first. Click a CVE for full detail.

1035
Correlated CVEs
856
Under active attack
275
Critical
750
High
595
RCE
Critical NVD 2026-05-29

CVE-2025-41268

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41269

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41270

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41272

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41273

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41274

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41275

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-29

CVE-2025-41277

AFFECTS 1 Security Service Edge (Formerly McAfee MVISION)

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-28

CVE-2026-9874

AFFECTS 6 Azure Commercial CloudAzure Government (includes Dynamics 365)Google Services (Google Cloud Platform Products and underlying Infrastructure)Google WorkspaceMicrosoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-33843

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-23652

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-40412

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-22

CVE-2026-47280

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-20

CVE-2026-20223

AFFECTS 9 AppDynamics GovAPMCisco Cloudlock for GovernmentCisco Meraki for GovernmentCisco SD-WAN for GovernmentCisco Umbrella for GovernmentCisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) +3 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-13

CVE-2026-0264

AFFECTS 1 Mendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-05-13

CVE-2026-0258

AFFECTS 1 Mendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-14

CVE-2026-34615

AFFECTS 12 Adobe Acrobat Sign for GovernmentAdobe AnalyticsAdobe CampaignAdobe Connect Managed Services (ACMS-GC)Adobe Creative Cloud for EnterpriseAdobe Document Cloud (PDF Services & Adobe Sign) +6 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-33105

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-32186

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-32213

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-04-03

CVE-2026-33107

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2026-01-23

CVE-2026-24304

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2025-09-24

CVE-2025-10585

AFFECTS 3 Google Services (Google Cloud Platform Products and underlying Infrastructure)Google WorkspaceMendix Cloud for Government

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2024-01-04

CVE-2024-22051

AFFECTS 1 GitHub Enterprise Cloud

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2023-09-12

CVE-2023-4501

AFFECTS 1 Fortify on Demand

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2023-03-17

CVE-2023-28531

AFFECTS 1 Cloud Insights

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2023-02-14

CVE-2023-21716

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2022-08-05

CVE-2022-37434

AFFECTS 1 Cloud Insights

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2021-12-10

CVE-2021-44228

AFFECTS 10 Cisco Cloudlock for GovernmentCisco Meraki for GovernmentCisco SD-WAN for GovernmentCisco Umbrella for GovernmentCisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)Cloud Insights +4 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2021-09-16

CVE-2021-40438

AFFECTS 17 Aconex for DefenseClarityCloud InsightsFederal Managed Cloud ServicesFusion CloudGeneral Support Systems (GSS) +11 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2021-04-09

CVE-2021-20021

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2020-05-21

CVE-2020-0901

AFFECTS 4 Azure Commercial CloudAzure Government (includes Dynamics 365)Microsoft Office 365 GCC HighOffice 365 Multi-Tenant & Supporting Services

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2020-05-06

CVE-2020-3187

AFFECTS 8 Cisco Cloudlock for GovernmentCisco Meraki for GovernmentCisco SD-WAN for GovernmentCisco Umbrella for GovernmentCisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)Duo Federal +2 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2018-01-29

CVE-2018-0101

AFFECTS 8 Cisco Cloudlock for GovernmentCisco Meraki for GovernmentCisco SD-WAN for GovernmentCisco Umbrella for GovernmentCisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)Duo Federal +2 more

▸ DO  Critical severity — schedule patching of the affected products.

Critical NVD 2017-05-23

CVE-2016-9841

AFFECTS 11 Aconex for DefenseCloud InsightsFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common ControlsOracle Cloud Infrastructure-Government Cloud +5 more

▸ DO  Critical severity — schedule patching of the affected products.

◀ PREV PAGE 07 / 07 NEXT ▶