A live CVE tracking dashboard powered by the Microsoft Security Response Center (MSRC) API, built as a standalone HTML page with automated daily updates via GitHub Actions.
- Fetches all CVE vulnerabilities from MSRC for the past 12 months — automatically, every hour.
- Displays severity levels (Critical / Important / Moderate / Low), CVSS scores, and exploit status.
- Shows which KB article patches each vulnerability, with direct links to the Microsoft Update Catalog.
- Fully searchable and filterable — by severity, product, exploit status, or KB availability.
| Feature | Details |
|---|---|
| Light / Dark theme | Click the toggle button to switch themes; preference is saved |
| Click a row | Expands KB patch panel — shows KB numbers, fixed builds, affected products |
| "Has KB Patch" filter | Instantly narrows to only patched CVEs |
| KB search | Type KB5094125 in the search box to find which CVE it fixes |
| Sorting | Click any column header to sort |
| Pagination | 50 CVEs per page |
.github/
workflows/
fetch-msrc.yml # GitHub Actions: fetches + parses MSRC API hourly
data/
msrc_cves.json # Parsed CVE data (auto-generated, do not edit)
index.html # The standalone dashboard page
README.md # Project documentation
winsecurity.py # Data collection script (used by both CI and local testing)
If you want to run the data collection script locally on your machine:
- Ensure you have Python installed.
- Run the script:
python winsecurity.pyThis will fetch the rolling 12 months of MSRC CVE data and update data/msrc_cves.json locally.
Create a new GitHub repository (e.g., github.com/faruk-guler/winsecurity) and push the following files/directories:
.github/workflows/fetch-msrc.ymldata/msrc_cves.json(initial seed data)index.htmlREADME.md
Go to your repo → Settings → Actions → General → Workflow permissions → Select "Read and write permissions" and check "Allow GitHub Actions to create and approve pull requests" → Save.
Go to the Actions tab of your repository, select Fetch MSRC CVE Data, and click Run workflow to trigger the first fetch manually.
Go to your repo → Settings → Pages
→ Under Build and deployment, set Source to Deploy from a branch
→ Choose your branch (e.g., main or master) and folder (/ (root)) → Save.
Your dashboard will be live at:
https://faruk-guler.github.io/winsecurity/
The GitHub Actions workflow runs every hour. Each month it automatically picks up the new Patch Tuesday release from Microsoft and consolidates it with the previous 11 months of data.
- Data source: MSRC CVRF API v3.0
- Automation: GitHub Actions
- Frontend: Vanilla HTML/CSS/JS (no frameworks)
- Hosting: GitHub Pages (static site hosting)
Faruk GULER / Sysadmin