Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 101 | CVE-2026-98616Microsoft — eth: fbnic: reset num_napi when the napi vectors are freed | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 102 | CVE-2026-98633Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 103 | CVE-2026-98637Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 104 | CVE-2026-98638Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 105 | CVE-2026-98639Microsoft — KVM: riscv: Fix NACL hfence entry update order | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 106 | CVE-2026-98648Microsoft — s390/uv: Prevent potential out-of-bounds read | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 107 | CVE-2026-98674Microsoft — iio: adc: adi-axi-adc: Initialize state mutex | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 108 | CVE-2026-98675Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 109 | CVE-2026-98678Microsoft — iio: adc: ad4030: fix invalid oversampling_ratio validation | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 110 | CVE-2026-98683Microsoft — smb: client: flush dirty data before zeroing a range | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 111 | CVE-2026-98684Microsoft — smb: client: flush and commit data before querying allocated ranges | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 112 | CVE-2026-98689Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 113 | CVE-2026-98690Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 114 | CVE-2026-98691Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 115 | CVE-2026-98729Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 116 | CVE-2026-98774Microsoft — rust_binder: cancel deferred work items in thread exit | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 117 | CVE-2026-98821Microsoft — block: reject polled dio with user integrity metadata | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 118 | CVE-2026-98842Microsoft — module: fix lost error code from codetag_load_module() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 119 | CVE-2026-98843Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 120 | CVE-2026-98818Microsoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() | 0 | — | 0.2% · 5.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 121 | CVE-2026-98356Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 122 | CVE-2026-98371Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 123 | CVE-2026-98372Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 124 | CVE-2026-98858Microsoft — io_uring: fix task_work add use-after-free with SQPOLL | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 125 | CVE-2026-98844Microsoft — netfs: clear post-EOF pagecache when extending a file via write | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — eth: fbnic: reset num_napi when the napi vectors are freed
EVRS 0 Informational
Rank 101 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
EVRS 0 Informational
Rank 102 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
EVRS 0 Informational
Rank 103 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
EVRS 0 Informational
Rank 104 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: riscv: Fix NACL hfence entry update order
EVRS 0 Informational
Rank 105 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/uv: Prevent potential out-of-bounds read
EVRS 0 Informational
Rank 106 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: adi-axi-adc: Initialize state mutex
EVRS 0 Informational
Rank 107 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
EVRS 0 Informational
Rank 108 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ad4030: fix invalid oversampling_ratio validation
EVRS 0 Informational
Rank 109 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: flush dirty data before zeroing a range
EVRS 0 Informational
Rank 110 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: flush and commit data before querying allocated ranges
EVRS 0 Informational
Rank 111 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
EVRS 0 Informational
Rank 112 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled
EVRS 0 Informational
Rank 113 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped
EVRS 0 Informational
Rank 114 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
EVRS 0 Informational
Rank 115 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — rust_binder: cancel deferred work items in thread exit
EVRS 0 Informational
Rank 116 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — block: reject polled dio with user integrity metadata
EVRS 0 Informational
Rank 117 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — module: fix lost error code from codetag_load_module()
EVRS 0 Informational
Rank 118 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data
EVRS 0 Informational
Rank 119 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
EVRS 0 Informational
Rank 120 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
EVRS 0 Informational
Rank 121 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len
EVRS 0 Informational
Rank 122 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
EVRS 0 Informational
Rank 123 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — io_uring: fix task_work add use-after-free with SQPOLL
EVRS 0 Informational
Rank 124 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: clear post-EOF pagecache when extending a file via write
EVRS 0 Informational
Rank 125 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
