Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 1001 | CVE-2013-0648Adobe — Adobe Flash Player Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.1% · 95.9th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year |
| 1002 | CVE-2024-4761Google — Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year |
| 1003 | CVE-2021-30762Apple — Apple iOS WebKit Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1004 | CVE-2025-6558Google — Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year |
| 1005 | CVE-2020-8467Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1006 | CVE-2017-6738Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1007 | CVE-2017-6739Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1008 | CVE-2017-6743Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1009 | CVE-2022-23176WatchGuard — WatchGuard Firebox and XTM Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.8% · 95.8th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year |
| 1010 | CVE-2017-1000253Linux — Linux Kernel PIE Stack Buffer Corruption VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.8 | 10.7% · 95.8th | 2024-09-09 | 2024-09-30KEV since 2024 · listed over a year |
| 1011 | CVE-2022-41328Fortinet — Fortinet FortiOS Path Traversal VulnerabilityKEV since 2023 · listed over a year | 75 | 7.1 | 10.7% · 95.8th | 2023-03-14 | 2023-04-04KEV since 2023 · listed over a year |
| 1012 | CVE-2020-15069Sophos — Sophos XG Firewall Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 10.7% · 95.8th | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year |
| 1013 | CVE-2022-41223Mitel — Mitel MiVoice Connect Code Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 6.8 | 10.7% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year |
| 1014 | CVE-2026-63030WordPress — WordPress Core Interpretation Conflict VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 10.6% · 95.8th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months |
| 1015 | CVE-2024-23222Apple — Apple Multiple Products WebKit Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.6% · 95.8th | 2024-01-23 | 2024-02-13KEV since 2024 · listed over a year |
| 1016 | CVE-2020-6572Google — Google Chrome Media Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.6% · 95.8th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year |
| 1017 | CVE-2022-40765Mitel — Mitel MiVoice Connect Command Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 6.8 | 10.6% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year |
| 1018 | CVE-2025-6543Citrix — Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.2 | 10.6% · 95.8th | 2025-06-30 | 2025-07-21KEV since 2025 · listed over a year |
| 1019 | CVE-2021-30761Apple — Apple iOS WebKit Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.5% · 95.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1020 | CVE-2013-0643Adobe — Adobe Flash Player Incorrect Default Permissions VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.5% · 95.8th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year |
| 1021 | CVE-2020-27932Apple — Apple Multiple Products Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 10.3% · 95.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1022 | CVE-2022-2586Linux — Linux Kernel Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 10.2% · 95.7th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year |
| 1023 | CVE-2024-44308Apple — Apple Multiple Products Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.2% · 95.7th | 2024-11-21 | 2024-12-12KEV since 2024 · listed over a year |
| 1024 | CVE-2024-6047GeoVision — GeoVision Devices OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 10.1% · 95.6th | 2025-05-07 | 2025-05-28KEV since 2025 · listed over a year |
| 1025 | CVE-2020-3433Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 10.0% · 95.6th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.