Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 26 | CVE-2026-98601Microsoft — Bluetooth: btintel_pcie: validate device-supplied DMA indices | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 27 | CVE-2026-98618Microsoft — eth: fbnic: Handle maximum standalone channels | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 28 | CVE-2026-98658Microsoft — iio: proximity: aw96103: validate firmware data length | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 29 | CVE-2026-98673Microsoft — iio: adc: pac1934: check ACPI label duplication | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 30 | CVE-2026-98727Microsoft — nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 31 | CVE-2026-98431Microsoft — RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency | 0 | — | 0.2% · 9.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 32 | CVE-2026-98469Microsoft — KVM: arm64: Fix AArch32 DBGBXVR<n> handling | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 33 | CVE-2026-98480Microsoft — nfc: trf7970a: power down on startup RX gain failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 34 | CVE-2026-98492Microsoft — net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 35 | CVE-2026-98496Microsoft — net: airoha: npu: cancel wdt_work after releasing the WDT IRQ | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 36 | CVE-2026-98497Microsoft — net/mlx5e: fix swapped IPv6 IPsec policy masks | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 37 | CVE-2026-98542Microsoft — cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 38 | CVE-2026-98543Microsoft — bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 39 | CVE-2026-98552Microsoft — perf/core: Fix a refcount leak in attach_perf_ctx_data() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 40 | CVE-2026-98563Microsoft — net: phylink: record the PHY only once bringup cannot fail | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 41 | CVE-2026-98564Microsoft — net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 42 | CVE-2026-98571Microsoft — net: stmmac: clear stale buf->page after recycling on skb build failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 43 | CVE-2026-98574Microsoft — net: bcmgenet: stop Tx NAPI before disabling the queues | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 44 | CVE-2026-98584Microsoft — net/sched: fix potential stack infoleak in em_text_dump() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 45 | CVE-2026-98592Microsoft — net: spacemit: clear TX descriptor on fragment mapping failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 46 | CVE-2026-98595Microsoft — udp: remove a disconnected socket from the 4-tuple hash table | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 47 | CVE-2026-98603Microsoft — ovpn: replace bind when clearing stale local source | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 48 | CVE-2026-98604Microsoft — ovpn: replace bind when learning local endpoint | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 49 | CVE-2026-98630Microsoft — eth: fbnic: Fix payload page pool error cleanup | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 50 | CVE-2026-98659Microsoft — iio: pressure: rohm-bm1390: Return error when read fails | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — Bluetooth: btintel_pcie: validate device-supplied DMA indices
EVRS 0 Informational
Rank 26 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Handle maximum standalone channels
EVRS 0 Informational
Rank 27 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: proximity: aw96103: validate firmware data length
EVRS 0 Informational
Rank 28 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: pac1934: check ACPI label duplication
EVRS 0 Informational
Rank 29 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
EVRS 0 Informational
Rank 30 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
EVRS 0 Informational
Rank 31 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Fix AArch32 DBGBXVR<n> handling
EVRS 0 Informational
Rank 32 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nfc: trf7970a: power down on startup RX gain failure
EVRS 0 Informational
Rank 33 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
EVRS 0 Informational
Rank 34 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
EVRS 0 Informational
Rank 35 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/mlx5e: fix swapped IPv6 IPsec policy masks
EVRS 0 Informational
Rank 36 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict
EVRS 0 Informational
Rank 37 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
EVRS 0 Informational
Rank 38 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — perf/core: Fix a refcount leak in attach_perf_ctx_data()
EVRS 0 Informational
Rank 39 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: phylink: record the PHY only once bringup cannot fail
EVRS 0 Informational
Rank 40 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq
EVRS 0 Informational
Rank 41 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: stmmac: clear stale buf->page after recycling on skb build failure
EVRS 0 Informational
Rank 42 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: bcmgenet: stop Tx NAPI before disabling the queues
EVRS 0 Informational
Rank 43 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/sched: fix potential stack infoleak in em_text_dump()
EVRS 0 Informational
Rank 44 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: spacemit: clear TX descriptor on fragment mapping failure
EVRS 0 Informational
Rank 45 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — udp: remove a disconnected socket from the 4-tuple hash table
EVRS 0 Informational
Rank 46 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ovpn: replace bind when clearing stale local source
EVRS 0 Informational
Rank 47 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ovpn: replace bind when learning local endpoint
EVRS 0 Informational
Rank 48 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Fix payload page pool error cleanup
EVRS 0 Informational
Rank 49 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: pressure: rohm-bm1390: Return error when read fails
EVRS 0 Informational
Rank 50 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
