Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,364 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 301 | CVE-2023-27351PaperCut — PaperCut NG/MF Improper Authentication VulnerabilityRansomwareCISA federal deadline · Overdue by 6 months | 87 | 7.5 | 78.1% · 99.58th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months |
| 302 | CVE-2021-42258BQE — BQE BillQuick Web Suite SQL Injection VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 87 | 9.8 | 74.4% · 99.49th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 303 | CVE-2023-1389TP-Link — TP-Link Archer AX-21 Command Injection VulnerabilityKEV since 2023 · listed over a year | 86 | 8.8 | 100.0% · 99.99th | 2023-05-01 | 2023-05-22KEV since 2023 · listed over a year |
| 304 | CVE-2023-4863Google — Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 86 | 8.8 | 100.0% · 99.98th | 2023-09-13 | 2023-10-04KEV since 2023 · listed over a year |
| 305 | CVE-2024-4879ServiceNow — ServiceNow Improper Input Validation VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.3 | 100.0% · 99.98th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year |
| 306 | CVE-2024-29824Ivanti — Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityKEV since 2024 · listed over a year | 86 | 8.8 | 99.9% · 99.97th | 2024-10-02 | 2024-10-23KEV since 2024 · listed over a year |
| 307 | CVE-2016-6277NETGEAR — NETGEAR Multiple Routers Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 8.8 | 99.8% · 99.96th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year |
| 308 | CVE-2024-5217ServiceNow — ServiceNow Incomplete List of Disallowed Inputs VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.2 | 99.6% · 99.95th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year |
| 309 | CVE-2011-0611Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 8.8 | 99.4% · 99.94th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 310 | CVE-2020-11978Apache — Apache Airflow Command InjectionKEV since 2022 · listed over a year | 86 | 8.8 | 99.2% · 99.94th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year |
| 311 | CVE-2022-36804Atlassian — Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityKEV since 2022 · listed over a year | 86 | 8.8 | 99.2% · 99.94th | 2022-09-30 | 2022-10-21KEV since 2022 · listed over a year |
| 312 | CVE-2012-3152Oracle — Oracle Fusion Middleware Unspecified VulnerabilityExigentKEV since 2021 · listed over a year | 86 | 9.1 | 98.8% · 99.93rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 313 | CVE-2024-8963Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.1 | 98.6% · 99.92nd | 2024-09-19 | 2024-10-10KEV since 2024 · listed over a year |
| 314 | CVE-2025-0108Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEV since 2025 · listed over a year | 86 | 8.8 | 98.5% · 99.92nd | 2025-02-18 | 2025-03-11KEV since 2025 · listed over a year |
| 315 | CVE-2023-25280D-Link — D-Link DIR-820 Router OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 97.9% · 99.91st | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year |
| 316 | CVE-2021-45382D-Link — D-Link Multiple Routers Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year |
| 317 | CVE-2021-36380Sunhillo — Sunhillo SureLine OS Command Injection VulnerablityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2024-03-05 | 2024-03-26KEV since 2024 · listed over a year |
| 318 | CVE-2015-7450IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.ExigentKEV since 2022 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year |
| 319 | CVE-2024-4358Progress — Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 97.5% · 99.9th | 2024-06-13 | 2024-07-04KEV since 2024 · listed over a year |
| 320 | CVE-2023-27524Apache — Apache Superset Insecure Default Initialization of Resource VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 97.4% · 99.9th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year |
| 321 | CVE-2007-3010Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 86 | 9.8 | 97.4% · 99.9th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year |
| 322 | CVE-2023-24489Citrix — Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityExigentKEV since 2023 · listed over a year | 86 | 9.8 | 97.3% · 99.9th | 2023-08-16 | 2023-09-06KEV since 2023 · listed over a year |
| 323 | CVE-2020-25213WordPress — WordPress File Manager Plugin Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 86 | 9.8 | 97.3% · 99.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 324 | CVE-2020-2555Oracle — Oracle Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 86 | 9.8 | 97.1% · 99.89th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 325 | CVE-2019-7256Nice — Nice Linear eMerge E3-Series OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 97.1% · 99.89th | 2024-03-25 | 2024-04-15KEV since 2024 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.