Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

Ranked by EVRS

140 match · filtered from 2,960
Priority Feed, rows 1 to 25
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
1 CVE-2026-98420Microsoft — ksmbd: follow SMB2 session expiration semantics 0 — 0.2% · 13.9th — —
2 CVE-2026-98184Microsoft — wifi: mwifiex: prevent authentication frame length truncation 0 — 0.2% · 12.1st — —
3 CVE-2026-98731Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() 0 — 0.2% · 10.6th — —
4 CVE-2026-98392Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one 0 — 0.2% · 10.5th — —
5 CVE-2026-98411Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() 0 — 0.2% · 10.5th — —
6 CVE-2026-98412Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() 0 — 0.2% · 10.5th — —
7 CVE-2026-98522Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() 0 — 0.2% · 10.5th — —
8 CVE-2026-98523Microsoft — drm/client: fix restore of partially initialized client 0 — 0.2% · 10.5th — —
9 CVE-2026-98528Microsoft — gpio: cdev: fix kernel stack leak to user-space in error path 0 — 0.2% · 10.4th — —
10 CVE-2026-98533Microsoft — ipe: protect the dm-verity root hash with RCU 0 — 0.2% · 10.4th — —
11 CVE-2026-98534Microsoft — ipe: fix use-after-free when auditing a newly loaded policy 0 — 0.2% · 10.4th — —
12 CVE-2026-98408Microsoft — watchdog: rzv2h: Avoid division by zero 0 — 0.2% · 10.2nd — —
13 CVE-2026-98296Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_sync 0 — 0.2% · 10.2nd — —
14 CVE-2026-98390Microsoft — x86/amd_node: Avoid divide by zero on virtualized systems 0 — 0.2% · 10.2nd — —
15 CVE-2026-98414Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages() 0 — 0.2% · 10.2nd — —
16 CVE-2026-98415Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node 0 — 0.2% · 10.2nd — —
17 CVE-2026-98759Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() 0 — 0.2% · 10.2nd — —
18 CVE-2026-98468Microsoft — KVM: arm64: Fix spurious warning for benign stage 2 teardown race 0 — 0.2% · 9.3rd — —
19 CVE-2026-98487Microsoft — net: bridge: mdb: restart port group walk after deletion 0 — 0.2% · 9.3rd — —
20 CVE-2026-98510Microsoft — drm/xe/vm: nuke PTs only after unlinking contested VMAs 0 — 0.2% · 9.3rd — —
21 CVE-2026-98512Microsoft — drm/nouveau: RCU-free the scheduler-containing nouveau_sched 0 — 0.2% · 9.3rd — —
22 CVE-2026-98513Microsoft — drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() 0 — 0.2% · 9.3rd — —
23 CVE-2026-98546Microsoft — arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 0 — 0.2% · 9.3rd — —
24 CVE-2026-98566Microsoft — drm/imagination: clamp freelist reconstruction requests 0 — 0.2% · 9.3rd — —
25 CVE-2026-98596Microsoft — ipv6: Fix dst leak for uncached routes. 0 — 0.2% · 9.3rd — —
Showing 1–25 of 140

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics