Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1 | CVE-2026-98420Microsoft — ksmbd: follow SMB2 session expiration semantics | 0 | — | 0.2% · 13.9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2 | CVE-2026-98184Microsoft — wifi: mwifiex: prevent authentication frame length truncation | 0 | — | 0.2% · 12.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 3 | CVE-2026-98731Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() | 0 | — | 0.2% · 10.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 4 | CVE-2026-98392Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 5 | CVE-2026-98411Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 6 | CVE-2026-98412Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 7 | CVE-2026-98522Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 8 | CVE-2026-98523Microsoft — drm/client: fix restore of partially initialized client | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 9 | CVE-2026-98528Microsoft — gpio: cdev: fix kernel stack leak to user-space in error path | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 10 | CVE-2026-98533Microsoft — ipe: protect the dm-verity root hash with RCU | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 11 | CVE-2026-98534Microsoft — ipe: fix use-after-free when auditing a newly loaded policy | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 12 | CVE-2026-98408Microsoft — watchdog: rzv2h: Avoid division by zero | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 13 | CVE-2026-98296Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_sync | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 14 | CVE-2026-98390Microsoft — x86/amd_node: Avoid divide by zero on virtualized systems | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 15 | CVE-2026-98414Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages() | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 16 | CVE-2026-98415Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 17 | CVE-2026-98759Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 18 | CVE-2026-98468Microsoft — KVM: arm64: Fix spurious warning for benign stage 2 teardown race | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 19 | CVE-2026-98487Microsoft — net: bridge: mdb: restart port group walk after deletion | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 20 | CVE-2026-98510Microsoft — drm/xe/vm: nuke PTs only after unlinking contested VMAs | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 21 | CVE-2026-98512Microsoft — drm/nouveau: RCU-free the scheduler-containing nouveau_sched | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 22 | CVE-2026-98513Microsoft — drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 23 | CVE-2026-98546Microsoft — arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 24 | CVE-2026-98566Microsoft — drm/imagination: clamp freelist reconstruction requests | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 25 | CVE-2026-98596Microsoft — ipv6: Fix dst leak for uncached routes. | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — ksmbd: follow SMB2 session expiration semantics
EVRS 0 Informational
Rank 1 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 13.9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: mwifiex: prevent authentication frame length truncation
EVRS 0 Informational
Rank 2 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 12.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
EVRS 0 Informational
Rank 3 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
EVRS 0 Informational
Rank 4 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
EVRS 0 Informational
Rank 5 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
EVRS 0 Informational
Rank 6 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
EVRS 0 Informational
Rank 7 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/client: fix restore of partially initialized client
EVRS 0 Informational
Rank 8 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — gpio: cdev: fix kernel stack leak to user-space in error path
EVRS 0 Informational
Rank 9 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipe: protect the dm-verity root hash with RCU
EVRS 0 Informational
Rank 10 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipe: fix use-after-free when auditing a newly loaded policy
EVRS 0 Informational
Rank 11 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — watchdog: rzv2h: Avoid division by zero
EVRS 0 Informational
Rank 12 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_sync
EVRS 0 Informational
Rank 13 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — x86/amd_node: Avoid divide by zero on virtualized systems
EVRS 0 Informational
Rank 14 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
EVRS 0 Informational
Rank 15 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
EVRS 0 Informational
Rank 16 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()
EVRS 0 Informational
Rank 17 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Fix spurious warning for benign stage 2 teardown race
EVRS 0 Informational
Rank 18 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: bridge: mdb: restart port group walk after deletion
EVRS 0 Informational
Rank 19 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/xe/vm: nuke PTs only after unlinking contested VMAs
EVRS 0 Informational
Rank 20 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/nouveau: RCU-free the scheduler-containing nouveau_sched
EVRS 0 Informational
Rank 21 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
EVRS 0 Informational
Rank 22 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — arm64/boot: Disable trapping of PMZR_EL0 writes to EL2
EVRS 0 Informational
Rank 23 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/imagination: clamp freelist reconstruction requests
EVRS 0 Informational
Rank 24 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipv6: Fix dst leak for uncached routes.
EVRS 0 Informational
Rank 25 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
