Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
140 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 126 | CVE-2026-98845Microsoft — tpm: Disable TPM on null key name mismatch | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 127 | CVE-2026-98444Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 128 | CVE-2026-98682Microsoft — smb: client: drain and invalidate before server-side copy/clone | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 129 | CVE-2026-98692Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 130 | CVE-2026-98788Microsoft — futex: Fix private hash use-after-free on resize | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 131 | CVE-2026-98437Microsoft — media: qcom: iris: fix runtime PM reference leaks | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 132 | CVE-2026-98867Microsoft — dm-pcache: bound the logical key offset from persistent memory | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 133 | CVE-2026-98376Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement | 0 | — | 0.1% · 3.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 134 | CVE-2026-98258Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list | 0 | — | 0.1% · 2.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 135 | CVE-2026-98281Microsoft — futex: Also allocate private hash on vfork() | 0 | — | 0.1% · 2.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 136 | CVE-2026-98256Microsoft — signal: Prevent exec() race | 0 | — | 0.1% · 2.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 137 | CVE-2026-98318Microsoft — smb: client: validate absolute native symlink targets before NT fixups | 0 | — | 0.1% · 2.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 138 | CVE-2026-98361Microsoft — RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths | 0 | — | 0.1% · 2.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 139 | CVE-2026-98228Microsoft — mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ | 0 | — | 0.1% · 1.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 140 | CVE-2026-98230Microsoft — xfrm: use hlist_del_init_rcu for state_cache and state_cache_input | 0 | — | 0.1% · 1.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — tpm: Disable TPM on null key name mismatch
EVRS 0 Informational
Rank 126 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush
EVRS 0 Informational
Rank 127 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: drain and invalidate before server-side copy/clone
EVRS 0 Informational
Rank 128 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory
EVRS 0 Informational
Rank 129 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — futex: Fix private hash use-after-free on resize
EVRS 0 Informational
Rank 130 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — media: qcom: iris: fix runtime PM reference leaks
EVRS 0 Informational
Rank 131 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — dm-pcache: bound the logical key offset from persistent memory
EVRS 0 Informational
Rank 132 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement
EVRS 0 Informational
Rank 133 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 3.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
EVRS 0 Informational
Rank 134 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — futex: Also allocate private hash on vfork()
EVRS 0 Informational
Rank 135 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — signal: Prevent exec() race
EVRS 0 Informational
Rank 136 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: validate absolute native symlink targets before NT fixups
EVRS 0 Informational
Rank 137 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
EVRS 0 Informational
Rank 138 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
EVRS 0 Informational
Rank 139 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 1.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
EVRS 0 Informational
Rank 140 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 1.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
