PS
PemSync

Security

Actively exploited (CISA KEV) and known vulnerabilities across the software PemSync tracks. Covers our tracked catalogue only — this is not a complete CVE database; see NVD for that. Absence of data does not mean software is secure.

A CVE source is mapped for 55 of 66 tracked apps — 53 with findings, 2 checked with none found. The remaining 11 have no source yet, so they appear with no findings regardless — a coverage gap, not a clean bill of health.

Last checked 21 Oct 2026, 2:20

Actively exploited

CISA KEV

Confirmed exploitation in the wild, and the latest tracked build is affected — or its status could not be confirmed. Patch these first. Resolved findings on the same app collapse in green inside its card.

Windows Server

Microsoft

Assessed against latest tracked build 10.0.26100.33650

1 affecting74 not affecting
Show 74 not affecting

Verdict covers your latest tracked line only — other supported versions may need a different update. See the advisory for the full affected list.

Windows

Microsoft

Assessed against latest tracked build 10.0.26300.9711

1 affecting73 not affecting
Show 73 not affecting

Verdict covers your latest tracked line only — other supported versions may need a different update. See the advisory for the full affected list.

Known CVEs — no confirmed exploitation

Vulnerabilities not in CISA KEV. Rows flagged affecting latest have unpatched CVEs on the current release — update those first; the rest can wait for normal patch cycles. Apps with exploited findings also appear above; counts here cover their non-exploited CVEs only.

SoftwareVendorAffecting latestKnown CVEs
PythonPython Software Foundation14 affecting140View
Neo4j DesktopNeo4j4 affecting9View
Adobe Acrobat ProAdobe3 affecting1389View
.NET Desktop RuntimeMicrosoft2 affecting72View
PowerShellMicrosoft2 affecting32View
Google ChromeGoogle—6924View
Microsoft EdgeMicrosoft—4410View
FirefoxMozilla—3524View
ThunderbirdMozilla—2054View
Adobe Acrobat ReaderAdobe—1064View
Microsoft 365 AppsMicrosoft—907View
WiresharkWireshark Foundation—795View
Oracle VirtualBoxOracle—482View
Foxit PDF ReaderFoxit—372View
Node.jsOpenJS Foundation—185View
.NET RuntimeMicrosoft—127View
VLC media playerVideoLAN—113View
Visual Studio CodeMicrosoft—99View
IntelliJ IDEAJetBrains—77View
LibreOfficeThe Document Foundation—71View
Cisco Webex AppCisco—69View
Zoom WorkplaceZoom—63View
Visual StudioMicrosoft—56View
MySQL WorkbenchOracle—42View
ASP.NET Core RuntimeMicrosoft—39View
PuTTYSimon Tatham—36View
BlenderBlender Foundation—35View
7-Zip7-Zip—31View
Microsoft TeamsMicrosoft—30View
Microsoft Defender AntivirusMicrosoft—26View
WinRARRARLAB—24View
Notepad++Notepad++—19View
AnyDeskAnyDesk—19View
WinSCPWinSCP—17View
Cloudflare One AgentCloudflare—16View
OneDriveMicrosoft—15View
TeamViewerTeamViewer—14View
Docker DesktopDocker—13View
GitGit—13View
PyCharmJetBrains—12View
MobaXtermMobatek—10View
TelegramTelegram—9View
SQL Server Management StudioMicrosoft—8View
DropboxDropbox—5View
NmapNmap Project—5View
BitwardenBitwarden—4View
TailscaleTailscale—3View
Citrix WorkspaceCitrix—2View
PostmanPostman—2View
AWS VPN ClientAmazon—2View
DiscordDiscord—2View
DBeaver CommunityDBeaver—1View
Google Drive for DesktopGoogle—1View
Tableau DesktopTableau—1View
Exploited in the wild — latest tracked builds not affected17 apps

CISA-KEV findings that we verified do not affect the build we track as latest — it is already past the fix. Nothing to act on now; staying current is what keeps it that way.

Impact unverified3 apps · 20 findings

We could not determine whether these exploited vulnerabilities reach the build we track — the match carried no usable version data. Treat them as unknown rather than resolved, and check the vendor advisory directly.