Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Other vendors in CISA KEV
1,366 non-Microsoft CVEs in the KEV catalog| # | CVE · title | EVRS ↓ | CVSS ↕ | EPSS ↕ | In KEV since ↕ | CISA deadline |
|---|---|---|---|---|---|---|
| 1176 | CVE-2026-31431Linux — Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.8 | 3.4% · 88.9th | 2026-05-01 | 2026-05-15CISA federal deadline · Overdue by 5 months |
| 1177 | CVE-2025-66644Array Networks — Array Networks ArrayOS AG OS Command Injection VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 9.8 | 3.4% · 88.8th | 2025-12-08 | 2025-12-29CISA federal deadline · Overdue by 10 months |
| 1178 | CVE-2024-53104Linux — Linux Kernel Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 3.4% · 88.8th | 2025-02-05 | 2025-02-26KEV since 2025 · listed over a year |
| 1179 | CVE-2025-42599Qualitia — Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 3.4% · 88.6th | 2025-04-28 | 2025-05-19KEV since 2025 · listed over a year |
| 1180 | CVE-2018-0167Cisco — Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 3.4% · 88.6th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year |
| 1181 | CVE-2020-3569Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.6 | 3.3% · 88.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1182 | CVE-2009-2055Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 5.9 | 3.3% · 88.5th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year |
| 1183 | CVE-2022-40139Trend Micro — Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 3.3% · 88.4th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year |
| 1184 | CVE-2022-32894Apple — Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.3% · 88.4th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year |
| 1185 | CVE-2022-48503Apple — Apple Multiple Products Unspecified VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 3.2% · 88.1st | 2025-10-20 | 2025-11-10KEV since 2025 · listed over a year |
| 1186 | CVE-2013-2596Linux — Linux Kernel Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.2% · 88.1st | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year |
| 1187 | CVE-2020-9934Apple — Apple iOS, iPadOS, and macOS Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 5.5 | 3.2% · 88.1st | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year |
| 1188 | CVE-2020-9907Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.2% · 88th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year |
| 1189 | CVE-2023-6548Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 3.2% · 88th | 2024-01-17 | 2024-01-24KEV since 2024 · listed over a year |
| 1190 | CVE-2020-0041Android — Android Kernel Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 3.1% · 87.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1191 | CVE-2026-87491Google — Google Chromium V8 Out of Bounds Write VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 8.8 | 3.1% · 87.8th | 2026-09-09 | 2026-09-23CISA federal deadline · Overdue by 31 days |
| 1192 | CVE-2011-4723D-Link — D-Link DIR-300 Router Cleartext Storage of a Password VulnerabilityKEV since 2022 · listed over a year | 75 | 5.7 | 3.1% · 87.5th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year |
| 1193 | CVE-2021-27562Arm — Arm Trusted Firmware Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 3.1% · 87.5th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1194 | CVE-2020-6819Mozilla — Mozilla Firefox And Thunderbird Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.1 | 3.0% · 87.4th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year |
| 1195 | CVE-2021-30666Apple — Apple iOS WebKit Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 3.0% · 87.3rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year |
| 1196 | CVE-2021-29256Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 3.0% · 87.2nd | 2023-07-07 | 2023-07-28KEV since 2023 · listed over a year |
| 1197 | CVE-2024-32896Android — Android Pixel Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 3.0% · 87.2nd | 2024-06-13 | 2024-07-04KEV since 2024 · listed over a year |
| 1198 | CVE-2024-7262Kingsoft — Kingsoft WPS Office Path Traversal VulnerabilityKEV since 2024 · listed over a year | 75 | 9.3 | 2.9% · 87th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year |
| 1199 | CVE-2021-30983Apple — Apple iOS and iPadOS Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 2.9% · 87th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year |
| 1200 | CVE-2023-38606Apple — Apple Multiple Products Kernel Unspecified VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 2.9% · 86.9th | 2023-07-26 | 2023-08-16KEV since 2023 · listed over a year |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.