Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 926 | CVE-2024-7965Google — Google Chromium V8 Inappropriate Implementation VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 18.5% · 97.2nd | 2024-08-28 | 2024-09-18KEV since 2024 · listed over a year |
| 927 | CVE-2022-38181Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 18.5% · 97.2nd | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year |
| 928 | CVE-2020-11899Treck TCP/IP stack — Treck TCP/IP stack Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 18.4% · 97.2nd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 929 | CVE-2026-22719Broadcom — Broadcom VMware Aria Operations Command Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.1 | 18.3% · 97.2nd | 2026-03-03 | 2026-03-24CISA federal deadline · Overdue by 7 months |
| 930 | CVE-2018-0147Cisco — Cisco Secure Access Control System Java Deserialization VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 18.2% · 97.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 931 | CVE-2010-4345Exim — Exim Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 18.0% · 97.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 932 | CVE-2023-42916Apple — Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityKEV since 2023 · listed over a year | 75 | 6.5 | 17.8% · 97.2nd | 2023-12-04 | 2023-12-25KEV since 2023 · listed over a year |
| 933 | CVE-2010-5326SAP — SAP NetWeaver Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 10.0 | 17.8% · 97.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 934 | CVE-2022-27926Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 17.6% · 97.1st | 2023-04-03 | 2023-04-24KEV since 2023 · listed over a year |
| 935 | CVE-2019-8605Apple — Apple Multiple Products Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 17.6% · 97.1st | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year |
| 936 | CVE-2021-44207Acclaim Systems — Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityKEV since 2024 · listed over a year | 75 | 8.1 | 17.6% · 97.1st | 2024-12-23 | 2025-01-13KEV since 2024 · listed over a year |
| 937 | CVE-2025-24085Apple — Apple Multiple Products Use-After-Free VulnerabilityKEV since 2025 · listed over a year | 75 | 10.0 | 17.5% · 97.1st | 2025-01-29 | 2025-02-19KEV since 2025 · listed over a year |
| 938 | CVE-2024-38813VMware — VMware vCenter Server Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 17.4% · 97.1st | 2024-11-20 | 2024-12-11KEV since 2024 · listed over a year |
| 939 | CVE-2020-4006VMware — Multiple VMware Products Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 9.1 | 17.3% · 97.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 940 | CVE-2023-26359Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 17.0% · 97.1st | 2023-08-21 | 2023-09-11KEV since 2023 · listed over a year |
| 941 | CVE-2021-30533Google — Google Chromium PopupBlocker Security Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 16.7% · 97th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year |
| 942 | CVE-2021-20022SonicWall — SonicWall Email Security Unrestricted Upload of File VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 7.2 | 16.6% · 97th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 943 | CVE-2023-32409Apple — Apple Multiple Products WebKit Sandbox Escape VulnerabilityKEV since 2023 · listed over a year | 75 | 8.6 | 16.5% · 97th | 2023-05-22 | 2023-06-12KEV since 2023 · listed over a year |
| 944 | CVE-2020-27950Apple — Apple Multiple Products Memory Initialization VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 16.5% · 97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 945 | CVE-2023-6345Google — Google Skia Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.6 | 16.5% · 97th | 2023-11-30 | 2023-12-21KEV since 2023 · listed over a year |
| 946 | CVE-2022-22620Apple — Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 16.3% · 97th | 2022-02-11 | 2022-02-25KEV since 2022 · listed over a year |
| 947 | CVE-2026-48907Widget Factory — Widget Factory Joomla Content Editor Improper Access Control VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 16.2% · 96.9th | 2026-06-16 | 2026-06-19CISA federal deadline · Overdue by 4 months |
| 948 | CVE-2019-8506Apple — Apple Multiple Products Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 16.2% · 96.9th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year |
| 949 | CVE-2019-7286Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 15.9% · 96.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year |
| 950 | CVE-2024-20481Cisco — Cisco ASA and FTD Denial-of-Service VulnerabilityKEV since 2024 · listed over a year | 75 | 5.8 | 15.9% · 96.9th | 2024-10-24 | 2024-11-14KEV since 2024 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.