Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 76 | CVE-2026-98868Microsoft — dm-pcache: reject a kset that overruns its segment | 0 | — | 0.2% · 5.9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 77 | CVE-2026-98440Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 78 | CVE-2026-98445Microsoft — xfs: don't let memory failures leak blocks and kill repairs | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 79 | CVE-2026-98475Microsoft — s390/cmf: Fix virtual vs physical address confusion | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 80 | CVE-2026-98611Microsoft — bpf: Check params size before reading reserved fields | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 81 | CVE-2026-98615Microsoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 82 | CVE-2026-98641Microsoft — bpf, arm64: set up the frame pointer for the exception callback | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 83 | CVE-2026-98680Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 84 | CVE-2026-98702Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 85 | CVE-2026-98713Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 86 | CVE-2026-98728Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 87 | CVE-2026-98730Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 88 | CVE-2026-98781Microsoft — drm/mediatek: Fix pdev reference leak in mtk_drm_bind() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 89 | CVE-2026-98782Microsoft — drm/mediatek: Fix ovl adaptor platform device leak | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 90 | CVE-2026-98783Microsoft — drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 91 | CVE-2026-98791Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 92 | CVE-2026-98841Microsoft — virt: vmgenid: set driver_data before registering notification handlers | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 93 | CVE-2026-98849Microsoft — pfcp: fix socket lifetime on netdevice registration failure | 0 | — | 0.2% · 5.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 94 | CVE-2026-98244Microsoft — btrfs: clear free space tree creation state on rebuild failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 95 | CVE-2026-98259Microsoft — fs/dax: check zero or empty entry before converting xarray entry | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 96 | CVE-2026-98447Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 97 | CVE-2026-98467Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 98 | CVE-2026-98472Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 99 | CVE-2026-98474Microsoft — s390/pci: Fix missing device lock in zpci_report_status() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 100 | CVE-2026-98585Microsoft — eth: fbnic: Avoid rounding zero ring sizes | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — dm-pcache: reject a kset that overruns its segment
EVRS 0 Informational
Rank 76 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
EVRS 0 Informational
Rank 77 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let memory failures leak blocks and kill repairs
EVRS 0 Informational
Rank 78 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/cmf: Fix virtual vs physical address confusion
EVRS 0 Informational
Rank 79 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Check params size before reading reserved fields
EVRS 0 Informational
Rank 80 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
EVRS 0 Informational
Rank 81 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf, arm64: set up the frame pointer for the exception callback
EVRS 0 Informational
Rank 82 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state
EVRS 0 Informational
Rank 83 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth
EVRS 0 Informational
Rank 84 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
EVRS 0 Informational
Rank 85 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random()
EVRS 0 Informational
Rank 86 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
EVRS 0 Informational
Rank 87 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
EVRS 0 Informational
Rank 88 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Fix ovl adaptor platform device leak
EVRS 0 Informational
Rank 89 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
EVRS 0 Informational
Rank 90 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
EVRS 0 Informational
Rank 91 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — virt: vmgenid: set driver_data before registering notification handlers
EVRS 0 Informational
Rank 92 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — pfcp: fix socket lifetime on netdevice registration failure
EVRS 0 Informational
Rank 93 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — btrfs: clear free space tree creation state on rebuild failure
EVRS 0 Informational
Rank 94 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — fs/dax: check zero or empty entry before converting xarray entry
EVRS 0 Informational
Rank 95 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
EVRS 0 Informational
Rank 96 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
EVRS 0 Informational
Rank 97 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
EVRS 0 Informational
Rank 98 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/pci: Fix missing device lock in zpci_report_status()
EVRS 0 Informational
Rank 99 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Avoid rounding zero ring sizes
EVRS 0 Informational
Rank 100 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
