Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 51 | CVE-2026-98676Microsoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registration | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 52 | CVE-2026-98693Microsoft — thunderbolt: Hold a router reference for each allocated HopID | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 53 | CVE-2026-98723Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 54 | CVE-2026-98724Microsoft — nvmet: pci-epf: reject too-short SGL segments | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 55 | CVE-2026-98804Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 56 | CVE-2026-98350Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present | 0 | — | 0.2% · 8.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 57 | CVE-2026-98562Microsoft — net: libwx: fix races in Tx timestamp handling | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 58 | CVE-2026-98617Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 59 | CVE-2026-98277Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop | 0 | — | 0.2% · 7.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 60 | CVE-2026-98196Microsoft — wifi: brcmsmac: fix UAF in brcms_free_timer() | 0 | — | 0.2% · 7.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 61 | CVE-2026-98240Microsoft — net: ip_tunnel: initialize `options_len` before referencing options | 0 | — | 0.2% · 7.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 62 | CVE-2026-98806Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled | 0 | — | 0.2% · 7.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 63 | CVE-2026-98375Microsoft — xen/netfront: drop RX packets with a short Ethernet header | 0 | — | 0.2% · 6.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 64 | CVE-2026-98613Microsoft — bpf: Bound ownership depth through local kptrs and graph roots | 0 | — | 0.2% · 6.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 65 | CVE-2026-98235Microsoft — net/sched: act_api: release tail references on DELACTION failure | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 66 | CVE-2026-98267Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 67 | CVE-2026-98291Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 68 | CVE-2026-98346Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 69 | CVE-2026-98448Microsoft — xfs: release orphanage dir inode if chown fails | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 70 | CVE-2026-98223Microsoft — mm: filemap: retain mapped dropbehind folios | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 71 | CVE-2026-98224Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 72 | CVE-2026-98226Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 73 | CVE-2026-98274Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 74 | CVE-2026-98313Microsoft — drm/msm/dp: skip PUSH_IDLE when the link was never enabled | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 75 | CVE-2026-98446Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registration
EVRS 0 Informational
Rank 51 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Hold a router reference for each allocated HopID
EVRS 0 Informational
Rank 52 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs
EVRS 0 Informational
Rank 53 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvmet: pci-epf: reject too-short SGL segments
EVRS 0 Informational
Rank 54 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
EVRS 0 Informational
Rank 55 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present
EVRS 0 Informational
Rank 56 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 8.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: libwx: fix races in Tx timestamp handling
EVRS 0 Informational
Rank 57 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector
EVRS 0 Informational
Rank 58 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop
EVRS 0 Informational
Rank 59 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 7.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: brcmsmac: fix UAF in brcms_free_timer()
EVRS 0 Informational
Rank 60 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 7.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: ip_tunnel: initialize `options_len` before referencing options
EVRS 0 Informational
Rank 61 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 7.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
EVRS 0 Informational
Rank 62 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 7.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xen/netfront: drop RX packets with a short Ethernet header
EVRS 0 Informational
Rank 63 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Bound ownership depth through local kptrs and graph roots
EVRS 0 Informational
Rank 64 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/sched: act_api: release tail references on DELACTION failure
EVRS 0 Informational
Rank 65 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
EVRS 0 Informational
Rank 66 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
EVRS 0 Informational
Rank 67 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs
EVRS 0 Informational
Rank 68 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: release orphanage dir inode if chown fails
EVRS 0 Informational
Rank 69 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm: filemap: retain mapped dropbehind folios
EVRS 0 Informational
Rank 70 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure
EVRS 0 Informational
Rank 71 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
EVRS 0 Informational
Rank 72 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
EVRS 0 Informational
Rank 73 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/msm/dp: skip PUSH_IDLE when the link was never enabled
EVRS 0 Informational
Rank 74 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init
EVRS 0 Informational
Rank 75 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
