Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 751 | CVE-2021-26829OpenPLC — OpenPLC ScadaBR Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 5.4 | 48.0% · 98.9th | 2025-11-28 | 2025-12-19CISA federal deadline · Overdue by 10 months |
| 752 | CVE-2013-2094Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.4 | 47.7% · 98.9th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year |
| 753 | CVE-2021-40407Reolink — Reolink RLC-410W IP Camera OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 47.6% · 98.8th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year |
| 754 | CVE-2016-3976SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 47.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 755 | CVE-2022-39197Fortra — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 46.4% · 98.8th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year |
| 756 | CVE-2019-17026Mozilla — Mozilla Firefox And Thunderbird Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 46.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 757 | CVE-2017-6862NETGEAR — NETGEAR Multiple Devices Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 45.7% · 98.8th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year |
| 758 | CVE-2017-16651Roundcube — Roundcube Webmail File Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 45.7% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 759 | CVE-2017-6737Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 45.2% · 98.8th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 760 | CVE-2024-9379Ivanti — Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 43.8% · 98.7th | 2024-10-09 | 2024-10-30KEV since 2024 · listed over a year |
| 761 | CVE-2026-28318SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.5 | 43.7% · 98.7th | 2026-06-05 | 2026-06-19CISA federal deadline · Overdue by 4 months |
| 762 | CVE-2014-100005D-Link — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityKEV since 2024 · listed over a year | 75 | 8.0 | 43.5% · 98.7th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year |
| 763 | CVE-2025-2775SysAid — SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEV since 2025 · listed over a year | 75 | 7.5 | 42.6% · 98.7th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year |
| 764 | CVE-2026-48282Adobe — Adobe ColdFusion Path Traversal VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 42.4% · 98.7th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months |
| 765 | CVE-2024-41710Mitel — Mitel SIP Phones Argument Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 41.6% · 98.7th | 2025-02-12 | 2025-03-05KEV since 2025 · listed over a year |
| 766 | CVE-2019-16928Exim — Exim Out-of-bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 41.6% · 98.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 767 | CVE-2023-33538TP-Link — TP-Link Multiple Routers Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 41.6% · 98.7th | 2025-06-16 | 2025-07-07KEV since 2025 · listed over a year |
| 768 | CVE-2025-20352Cisco — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityKEV since 2025 · listed over a year | 75 | 7.7 | 41.5% · 98.7th | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year |
| 769 | CVE-2023-4762Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 41.4% · 98.7th | 2024-02-06 | 2024-02-27KEV since 2024 · listed over a year |
| 770 | CVE-2011-1823Android — Android OS Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 41.4% · 98.7th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year |
| 771 | CVE-2021-22894Ivanti — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 41.3% · 98.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 772 | CVE-2023-2033Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 40.8% · 98.7th | 2023-04-17 | 2023-05-08KEV since 2023 · listed over a year |
| 773 | CVE-2017-5030Google — Google Chromium V8 Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 40.6% · 98.7th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year |
| 774 | CVE-2015-0666Cisco — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 40.4% · 98.6th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 775 | CVE-2010-5330Ubiquiti — Ubiquiti AirOS Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 40.2% · 98.6th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.