Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,364 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 1126 | CVE-2025-55177Meta Platforms — Meta Platforms WhatsApp Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.7% · 91.8th | 2025-09-02 | 2025-09-23KEV since 2025 · listed over a year |
| 1127 | CVE-2019-18988TeamViewer — TeamViewer Desktop Bypass Remote Login VulnerabilityKEV since 2021 · listed over a year | 75 | 7.0 | 4.7% · 91.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1128 | CVE-2012-0518Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 4.7 | 4.7% · 91.7th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year |
| 1129 | CVE-2019-7287Apple — Apple iOS Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 4.6% · 91.6th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year |
| 1130 | CVE-2022-2856Google — Google Chromium Intents Insufficient Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 4.6% · 91.6th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year |
| 1131 | CVE-2026-20045Cisco — Cisco Unified Communications Products Code Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 4.5% · 91.5th | 2026-01-21 | 2026-02-11CISA federal deadline · Overdue by 8 months |
| 1132 | CVE-2021-30661Apple — Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 4.5% · 91.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1133 | CVE-2023-46748F5 — F5 BIG-IP Configuration Utility SQL Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 4.5% · 91.4th | 2023-10-31 | 2023-11-21KEV since 2023 · listed over a year |
| 1134 | CVE-2025-24200Apple — Apple iOS and iPadOS Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 4.4% · 91.3rd | 2025-02-12 | 2025-03-05KEV since 2025 · listed over a year |
| 1135 | CVE-2023-41061Apple — Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 4.4% · 91.3rd | 2023-09-11 | 2023-10-02KEV since 2023 · listed over a year |
| 1136 | CVE-2025-48384Git — Git Link Following VulnerabilityKEV since 2025 · listed over a year | 75 | 8.0 | 4.4% · 91.2nd | 2025-08-25 | 2025-09-15KEV since 2025 · listed over a year |
| 1137 | CVE-2024-20399Cisco — Cisco NX-OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 6.7 | 4.3% · 91.1st | 2024-07-02 | 2024-07-23KEV since 2024 · listed over a year |
| 1138 | CVE-2023-41179Trend Micro — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.2 | 4.3% · 91st | 2023-09-21 | 2023-10-12KEV since 2023 · listed over a year |
| 1139 | CVE-2021-20035SonicWall — SonicWall SMA100 Appliances OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 6.5 | 4.2% · 90.9th | 2025-04-16 | 2025-05-07KEV since 2025 · listed over a year |
| 1140 | CVE-2021-30869Apple — Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 4.1% · 90.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1141 | CVE-2024-53197Linux — Linux Kernel Out-of-Bounds Access VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 4.1% · 90.7th | 2025-04-09 | 2025-04-30KEV since 2025 · listed over a year |
| 1142 | CVE-2018-0161Cisco — Cisco IOS Software Resource Management Errors VulnerabilityKEV since 2022 · listed over a year | 75 | 6.3 | 4.1% · 90.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1143 | CVE-2025-27915Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.1% · 90.6th | 2025-10-07 | 2025-10-28KEV since 2025 · listed over a year |
| 1144 | CVE-2023-43000Apple — Apple Multiple products Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 4.0% · 90.6th | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months |
| 1145 | CVE-2026-3055Citrix — Citrix NetScaler Out-of-Bounds Read VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 4.0% · 90.6th | 2026-03-30 | 2026-04-02CISA federal deadline · Overdue by 7 months |
| 1146 | CVE-2025-2749Kentico — Kentico Xperience Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.2 | 4.0% · 90.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months |
| 1147 | CVE-2019-7483SonicWall — SonicWall SMA100 Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 4.0% · 90.5th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year |
| 1148 | CVE-2024-39717Versa — Versa Director Dangerous File Type Upload VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 4.0% · 90.5th | 2024-08-23 | 2024-09-13KEV since 2024 · listed over a year |
| 1149 | CVE-2021-27137DD-WRT — DD-WRT Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.1 | 4.0% · 90.5th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months |
| 1150 | CVE-2026-75650Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCISA federal deadline · Overdue by 42 days | 75 | 10.0 | 3.9% · 90.4th | 2026-09-08 | 2026-09-11CISA federal deadline · Overdue by 42 days |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.