Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 1126 | CVE-2004-1464Cisco — Cisco IOS Denial-of-Service VulnerabilityKEV since 2023 · listed over a year | 75 | 5.9 | 4.8% · 92nd | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year |
| 1127 | CVE-2023-45727North Grid — North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityKEV since 2024 · listed over a year | 75 | 7.5 | 4.8% · 91.9th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year |
| 1128 | CVE-2013-3993IBM — IBM InfoSphere BigInsights Invalid Input VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 4.8% · 91.9th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year |
| 1129 | CVE-2025-55177Meta Platforms — Meta Platforms WhatsApp Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.7% · 91.8th | 2025-09-02 | 2025-09-23KEV since 2025 · listed over a year |
| 1130 | CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 9.5 | 4.7% · 91.8th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 24 days |
| 1131 | CVE-2019-18988TeamViewer — TeamViewer Desktop Bypass Remote Login VulnerabilityKEV since 2021 · listed over a year | 75 | 7.0 | 4.7% · 91.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1132 | CVE-2012-0518Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 4.7 | 4.7% · 91.8th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year |
| 1133 | CVE-2019-7287Apple — Apple iOS Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 4.6% · 91.6th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year |
| 1134 | CVE-2022-2856Google — Google Chromium Intents Insufficient Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 4.6% · 91.6th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year |
| 1135 | CVE-2026-20045Cisco — Cisco Unified Communications Products Code Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 4.5% · 91.5th | 2026-01-21 | 2026-02-11CISA federal deadline · Overdue by 8 months |
| 1136 | CVE-2021-30661Apple — Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 4.5% · 91.5th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1137 | CVE-2023-46748F5 — F5 BIG-IP Configuration Utility SQL Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 4.5% · 91.4th | 2023-10-31 | 2023-11-21KEV since 2023 · listed over a year |
| 1138 | CVE-2025-24200Apple — Apple iOS and iPadOS Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 4.4% · 91.3rd | 2025-02-12 | 2025-03-05KEV since 2025 · listed over a year |
| 1139 | CVE-2023-41061Apple — Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 4.4% · 91.3rd | 2023-09-11 | 2023-10-02KEV since 2023 · listed over a year |
| 1140 | CVE-2021-20035SonicWall — SonicWall SMA100 Appliances OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 6.5 | 4.4% · 91.3rd | 2025-04-16 | 2025-05-07KEV since 2025 · listed over a year |
| 1141 | CVE-2025-48384Git — Git Link Following VulnerabilityKEV since 2025 · listed over a year | 75 | 8.0 | 4.4% · 91.2nd | 2025-08-25 | 2025-09-15KEV since 2025 · listed over a year |
| 1142 | CVE-2024-20399Cisco — Cisco NX-OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 6.7 | 4.3% · 91.1st | 2024-07-02 | 2024-07-23KEV since 2024 · listed over a year |
| 1143 | CVE-2023-41179Trend Micro — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.2 | 4.3% · 91st | 2023-09-21 | 2023-10-12KEV since 2023 · listed over a year |
| 1144 | CVE-2021-30869Apple — Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 4.1% · 90.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1145 | CVE-2024-53197Linux — Linux Kernel Out-of-Bounds Access VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 4.1% · 90.7th | 2025-04-09 | 2025-04-30KEV since 2025 · listed over a year |
| 1146 | CVE-2018-0161Cisco — Cisco IOS Software Resource Management Errors VulnerabilityKEV since 2022 · listed over a year | 75 | 6.3 | 4.1% · 90.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1147 | CVE-2025-27915Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.1% · 90.6th | 2025-10-07 | 2025-10-28KEV since 2025 · listed over a year |
| 1148 | CVE-2023-43000Apple — Apple Multiple products Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 4.0% · 90.6th | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months |
| 1149 | CVE-2026-3055Citrix — Citrix NetScaler Out-of-Bounds Read VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 4.0% · 90.6th | 2026-03-30 | 2026-04-02CISA federal deadline · Overdue by 7 months |
| 1150 | CVE-2025-2749Kentico — Kentico Xperience Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.2 | 4.0% · 90.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.