Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 726 | CVE-2023-20118Cisco — Cisco Small Business RV Series Routers Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 54.1% · 99.01st | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year |
| 727 | CVE-2020-25079D-Link — D-Link DCS-2530L and DCS-2670L Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 54.0% · 99.01st | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year |
| 728 | CVE-2014-0130Rails — Ruby on Rails Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 53.7% · 99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 729 | CVE-2023-41064Apple — Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 53.4% · 99th | 2023-09-11 | 2023-10-02KEV since 2023 · listed over a year |
| 730 | CVE-2025-14611Gladinet — Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 7.1 | 53.3% · 99th | 2025-12-15 | 2026-01-05CISA federal deadline · Overdue by 10 months |
| 731 | CVE-2023-45249Acronis — Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 53.3% · 99th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year |
| 732 | CVE-2016-2388SAP — SAP NetWeaver Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 5.3 | 52.2% · 99th | 2022-06-09 | 2022-06-30KEV since 2022 · listed over a year |
| 733 | CVE-2019-13272Linux — Linux Kernel Improper Privilege Management VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 52.2% · 99th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year |
| 734 | CVE-2021-28550Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 51.9% · 99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 735 | CVE-2021-20023SonicWall — SonicWall Email Security Path Traversal VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 4.9 | 51.7% · 99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 736 | CVE-2023-32434Apple — Apple Multiple Products Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 51.5% · 98.9th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year |
| 737 | CVE-2013-5223D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 50.8% · 98.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 738 | CVE-2023-49897FXC — FXC AE1021, AE1021PE OS Command Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 50.4% · 98.9th | 2023-12-21 | 2024-01-11KEV since 2023 · listed over a year |
| 739 | CVE-2019-13720Google — Google Chrome WebAudio Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 49.4% · 98.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year |
| 740 | CVE-2021-22017VMware — VMware vCenter Server Improper Access ControlKEV since 2022 · listed over a year | 75 | 5.3 | 49.2% · 98.9th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year |
| 741 | CVE-2021-3493Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 49.2% · 98.9th | 2022-10-20 | 2022-11-10KEV since 2022 · listed over a year |
| 742 | CVE-2023-37580Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 49.1% · 98.9th | 2023-07-27 | 2023-08-17KEV since 2023 · listed over a year |
| 743 | CVE-2023-5217Google — Google Chromium libvpx Heap Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 49.0% · 98.9th | 2023-10-02 | 2023-10-23KEV since 2023 · listed over a year |
| 744 | CVE-2014-4404Apple — Apple OS X Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 48.9% · 98.9th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year |
| 745 | CVE-2025-68645Synacor — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 8.8 | 48.9% · 98.9th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months |
| 746 | CVE-2019-15752Docker — Docker Desktop Community Edition Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 48.6% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 747 | CVE-2022-23227NUUO — NUUO NVRmini2 Devices Missing Authentication VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 48.5% · 98.9th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year |
| 748 | CVE-2020-16009Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 48.3% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 749 | CVE-2016-1646Google — Google Chromium V8 Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year |
| 750 | CVE-2018-5430TIBCO — TIBCO JasperReports Server Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-12-29 | 2023-01-19KEV since 2022 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.