Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,364 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 1051 | CVE-2023-28434MinIO — MinIO Security Feature Bypass VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 7.9% · 94.7th | 2023-09-19 | 2023-10-10KEV since 2023 · listed over a year |
| 1052 | CVE-2026-18556N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.2 | 7.9% · 94.7th | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 3 months |
| 1053 | CVE-2023-0386Linux — Linux Kernel Improper Ownership Management VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 7.9% · 94.7th | 2025-06-17 | 2025-07-08KEV since 2025 · listed over a year |
| 1054 | CVE-2021-4102Google — Google Chromium V8 Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 7.8% · 94.7th | 2021-12-15 | 2021-12-29KEV since 2021 · listed over a year |
| 1055 | CVE-2025-5419Google — Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 7.8% · 94.7th | 2025-06-05 | 2025-06-26KEV since 2025 · listed over a year |
| 1056 | CVE-2018-0172Cisco — Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.8% · 94.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1057 | CVE-2018-0155Cisco — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.7% · 94.6th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1058 | CVE-2012-2034Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.7% · 94.6th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year |
| 1059 | CVE-2021-1870Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 7.7% · 94.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1060 | CVE-2018-0173Cisco — Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.6% · 94.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1061 | CVE-2018-0174Cisco — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.6% · 94.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1062 | CVE-2024-5274Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 9.6 | 7.5% · 94.5th | 2024-05-28 | 2024-06-18KEV since 2024 · listed over a year |
| 1063 | CVE-2021-30554Google — Google Chromium WebGL Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 7.4% · 94.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1064 | CVE-2017-6744Cisco — Cisco IOS Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 7.3% · 94.4th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1065 | CVE-2020-3950VMware — VMware Multiple Products Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 7.3% · 94.3rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1066 | CVE-2025-24472Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 8.1 | 7.2% · 94.3rd | 2025-03-18 | 2025-04-08KEV since 2025 · listed over a year |
| 1067 | CVE-2026-20128Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.5 | 7.2% · 94.3rd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months |
| 1068 | CVE-2018-0158Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.2% · 94.3rd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1069 | CVE-2021-1879Apple — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 7.1% · 94.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1070 | CVE-2019-0344SAP — SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 7.1% · 94.2nd | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year |
| 1071 | CVE-2017-12231Cisco — Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1072 | CVE-2017-12233Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1073 | CVE-2017-12234Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1074 | CVE-2017-12235Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
| 1075 | CVE-2017-12237Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.