Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,364 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 451 | CVE-2022-26501Veeam — Veeam Backup & Replication Remote Code Execution VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 85 | 9.8 | 4.1% · 90.7th | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year |
| 452 | CVE-2024-11667Zyxel — Zyxel Multiple Firewalls Path Traversal VulnerabilityRansomwareExigentKEV since 2024 · listed over a year | 85 | 9.8 | 2.9% · 87th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year |
| 453 | CVE-2026-59310Broadcom — Broadcom VMware vCenter Path Traversal VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 2 months | 85 | 9.8 | 2.6% · 85th | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months |
| 454 | CVE-2026-48027Nx — Nx Console Embedded Malicious Code VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 1.3% · 71st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months |
| 455 | CVE-2026-45321TanStack — TanStack Unspecified VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months | 85 | 9.6 | 1.1% · 64.1st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months |
| 456 | CVE-2014-0160OpenSSL — OpenSSL Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year |
| 457 | CVE-2023-32315Ignite Realtime — Ignite Realtime Openfire Path Traversal VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-08-24 | 2023-09-14KEV since 2023 · listed over a year |
| 458 | CVE-2023-44487IETF — HTTP/2 Rapid Reset Attack VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year |
| 459 | CVE-2020-3452Cisco — Cisco ASA and FTD Read-Only Path Traversal VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 460 | CVE-2021-22204Perl — ExifTool Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2021-11-17 | 2021-12-01KEV since 2021 · listed over a year |
| 461 | CVE-2021-3156Sudo — Sudo Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2022-04-06 | 2022-04-27KEV since 2022 · listed over a year |
| 462 | CVE-2021-39226Grafana Labs — Grafana Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 84 | 7.3 | 99.9% · 99.97th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year |
| 463 | CVE-2018-0296Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 464 | CVE-2023-21839Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2023-05-01 | 2023-05-22KEV since 2023 · listed over a year |
| 465 | CVE-2019-1653Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.96th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 466 | CVE-2023-29298Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.96th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year |
| 467 | CVE-2023-38205Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.95th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year |
| 468 | CVE-2024-28995SolarWinds — SolarWinds Serv-U Path Traversal VulnerabilityKEV since 2024 · listed over a year | 84 | 7.5 | 99.6% · 99.95th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year |
| 469 | CVE-2019-17558Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 98.6% · 99.92nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 470 | CVE-2024-20767Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 84 | 7.4 | 98.5% · 99.92nd | 2024-12-16 | 2025-01-06KEV since 2024 · listed over a year |
| 471 | CVE-2021-21311Adminer — Adminer Server-Side Request Forgery VulnerabilityKEV since 2025 · listed over a year | 84 | 7.2 | 98.5% · 99.92nd | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year |
| 472 | CVE-2024-12987DrayTek — DrayTek Vigor Routers OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 84 | 6.9 | 98.2% · 99.91st | 2025-05-15 | 2025-06-05KEV since 2025 · listed over a year |
| 473 | CVE-2022-43769Hitachi Vantara — Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityKEV since 2025 · listed over a year | 84 | 7.2 | 97.7% · 99.91st | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year |
| 474 | CVE-2020-25078D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityKEV since 2025 · listed over a year | 84 | 7.5 | 97.5% · 99.9th | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year |
| 475 | CVE-2021-41277Metabase — Metabase GeoJSON API Local File Inclusion VulnerabilityKEV since 2024 · listed over a year | 84 | 7.5 | 97.2% · 99.9th | 2024-11-12 | 2024-12-03KEV since 2024 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.