PS
PemSync

Security

Actively exploited (CISA KEV) and known vulnerabilities across the software PemSync tracks. Covers our tracked catalogue only — this is not a complete CVE database; see NVD for that. Absence of data does not mean software is secure.

A CVE source is mapped for 55 of 66 tracked apps — 53 with findings, 2 checked with none found. The remaining 11 have no source yet, so they appear with no findings regardless — a coverage gap, not a clean bill of health.

Last checked 5 Sep 2026, 22:15

Actively exploited

CISA KEV

Confirmed exploitation in the wild, and the latest tracked build is affected — or its status could not be confirmed. Patch these first. Resolved findings on the same app collapse in green inside its card.

Windows Server

Microsoft

Assessed against latest tracked build 10.0.26100.33296

1 affecting69 not affecting
Show 69 not affecting

Verdict covers your latest tracked line only — other supported versions may need a different update. See the advisory for the full affected list.

Windows

Microsoft

Assessed against latest tracked build 10.0.28000.2804

1 affecting68 not affecting
Show 68 not affecting

Verdict covers your latest tracked line only — other supported versions may need a different update. See the advisory for the full affected list.

Known CVEs — no confirmed exploitation

Vulnerabilities not in CISA KEV. Rows flagged affecting latest have unpatched CVEs on the current release — update those first; the rest can wait for normal patch cycles. Apps with exploited findings also appear above; counts here cover their non-exploited CVEs only.

SoftwareVendorAffecting latestKnown CVEs
Neo4j DesktopNeo4j4 affecting9View
Adobe Acrobat ProAdobe3 affecting1357View
Google ChromeGoogle—6190View
Microsoft EdgeMicrosoft—3706View
FirefoxMozilla—3293View
ThunderbirdMozilla—1900View
Adobe Acrobat ReaderAdobe—1064View
WiresharkWireshark Foundation—776View
Microsoft 365 AppsMicrosoft—656View
Oracle VirtualBoxOracle—463View
Foxit PDF ReaderFoxit—372View
Node.jsOpenJS Foundation—185View
PythonPython Software Foundation—140View
.NET RuntimeMicrosoft—117View
VLC media playerVideoLAN—113View
Visual Studio CodeMicrosoft—77View
LibreOfficeThe Document Foundation—71View
IntelliJ IDEAJetBrains—70View
Cisco Webex AppCisco—69View
Zoom WorkplaceZoom—63View
Visual StudioMicrosoft—56View
.NET Desktop RuntimeMicrosoft—48View
MySQL WorkbenchOracle—42View
ASP.NET Core RuntimeMicrosoft—37View
PuTTYSimon Tatham—36View
BlenderBlender Foundation—35View
7-Zip7-Zip—31View
PowerShellMicrosoft—30View
Microsoft TeamsMicrosoft—28View
Microsoft Defender AntivirusMicrosoft—26View
WinRARRARLAB—24View
Notepad++Notepad++—19View
AnyDeskAnyDesk—19View
WinSCPWinSCP—17View
Cloudflare One AgentCloudflare—16View
OneDriveMicrosoft—15View
TeamViewerTeamViewer—14View
Docker DesktopDocker—13View
GitGit—13View
PyCharmJetBrains—10View
MobaXtermMobatek—10View
TelegramTelegram—9View
SQL Server Management StudioMicrosoft—7View
DropboxDropbox—5View
NmapNmap Project—5View
BitwardenBitwarden—4View
TailscaleTailscale—3View
Citrix WorkspaceCitrix—2View
PostmanPostman—2View
AWS VPN ClientAmazon—2View
DiscordDiscord—2View
DBeaver CommunityDBeaver—1View
Google Drive for DesktopGoogle—1View
Tableau DesktopTableau—1View
Exploited in the wild — latest tracked builds not affected17 apps

CISA-KEV findings that we verified do not affect the build we track as latest — it is already past the fix. Nothing to act on now; staying current is what keeps it that way.

Impact unverified3 apps · 20 findings

We could not determine whether these exploited vulnerabilities reach the build we track — the match carried no usable version data. Treat them as unknown rather than resolved, and check the vendor advisory directly.