Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 326 | CVE-2018-13374Fortinet — Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 4.3 | 38.1% · 98.6th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 327 | CVE-2008-0655Adobe — Adobe Acrobat and Reader Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 37.9% · 98.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.379. | |||||||
| 328 | CVE-2026-39987Marimo — Marimo Remote Code Execution VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 9.3 | 37.9% · 98.5th | 2026-04-23 | 2026-05-07CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.379. | |||||||
| 329 | CVE-2023-3079Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 37.9% · 98.5th | 2023-06-07 | 2023-06-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.379. | |||||||
| 330 | CVE-2025-9377TP-Link — TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 37.7% · 98.5th | 2025-09-03 | 2025-09-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.377. | |||||||
| 331 | CVE-2019-11707Mozilla — Mozilla Firefox and Thunderbird Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 37.7% · 98.5th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.377. | |||||||
| 332 | CVE-2019-11001Reolink — Reolink Multiple IP Cameras OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 37.5% · 98.5th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.375. | |||||||
| 333 | CVE-2014-3153Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 37.2% · 98.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.372. | |||||||
| 334 | CVE-2021-38163SAP — SAP NetWeaver Unrestricted File Upload VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 36.9% · 98.5th | 2022-06-09 | 2022-06-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.369. | |||||||
| 335 | CVE-2018-4990Adobe — Adobe Acrobat and Reader Double Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 336 | CVE-2020-5735Amcrest — Amcrest Cameras and NVR Stack-based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 337 | CVE-2020-13671Drupal — Drupal core Un-restricted Upload of FileKEV since 2022 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 338 | CVE-2021-39935GitLab — GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.5 | 36.1% · 98.5th | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.361. | |||||||
| 339 | CVE-2017-6327Symantec — Symantec Messaging Gateway Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 35.9% · 98.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.359. | |||||||
| 340 | CVE-2018-17480Google — Google Chromium V8 Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 35.6% · 98.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.356. | |||||||
| 341 | CVE-2022-22960VMware — VMware Multiple Products Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 35.5% · 98.5th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.355. | |||||||
| 342 | CVE-2026-20316Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomwareCISA federal deadline · Overdue by 3 months | 75 | 5.3 | 35.1% · 98.4th | 2026-07-29 | 2026-08-01CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 343 | CVE-2021-37975Google — Google Chromium V8 Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 34.9% · 98.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.349. | |||||||
| 344 | CVE-2025-21042Samsung — Samsung Mobile Devices Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 9.8 | 34.5% · 98.4th | 2025-11-10 | 2025-12-01CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.345. | |||||||
| 345 | CVE-2016-5198Google — Google Chromium V8 Out-of-Bounds Memory VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 34.2% · 98.4th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.342. | |||||||
| 346 | CVE-2020-2509QNAP — QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 34.0% · 98.4th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.340. | |||||||
| 347 | CVE-2008-4128Cisco — Cisco IOS Cross-Site Request Forgery VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.1 | 33.9% · 98.4th | 2026-07-13 | 2026-07-16CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.339. | |||||||
| 348 | CVE-2022-40799D-Link — D-Link DNR-322L Download of Code Without Integrity Check VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 33.7% · 98.4th | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.337. | |||||||
| 349 | CVE-2018-13383Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds WriteRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 33.6% · 98.4th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 350 | CVE-2020-9715Adobe — Adobe Acrobat Use-After-Free VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.8 | 33.5% · 98.4th | 2026-04-13 | 2026-04-27CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.335. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsFortinet — Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 326 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 4.3 NVD
- EPSS
- 38.1% 98.6th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Unspecified Vulnerability
EVRS 75 Urgent
Rank 327 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 37.9% 98.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Marimo — Marimo Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 328 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.3 NVD
- EPSS
- 37.9% 98.5th percentile
- In CISA KEV since
- 2026-04-23
- CISA deadline
- 2026-05-07 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Marimo
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 329 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 37.9% 98.5th percentile
- In CISA KEV since
- 2023-06-07
- CISA deadline
- 2023-06-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
TP-Link — TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 330 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 37.7% 98.5th percentile
- In CISA KEV since
- 2025-09-03
- CISA deadline
- 2025-09-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Mozilla — Mozilla Firefox and Thunderbird Type Confusion Vulnerability
EVRS 75 Urgent
Rank 331 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 37.7% 98.5th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Reolink — Reolink Multiple IP Cameras OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 332 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.2 NVD
- EPSS
- 37.5% 98.5th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Reolink
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 333 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 37.2% 98.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
SAP — SAP NetWeaver Unrestricted File Upload Vulnerability
EVRS 75 Urgent
Rank 334 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.9% 98.5th percentile
- In CISA KEV since
- 2022-06-09
- CISA deadline
- 2022-06-30 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Double Free Vulnerability
EVRS 75 Urgent
Rank 335 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Amcrest — Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 336 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Amcrest
- Source
- CISA KEV
Drupal — Drupal core Un-restricted Upload of File
EVRS 75 Urgent
Rank 337 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
GitLab — GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 338 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 36.1% 98.5th percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- GitLab
- Source
- CISA KEV
Symantec — Symantec Messaging Gateway Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 339 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 35.9% 98.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Symantec
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 340 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 35.6% 98.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
VMware — VMware Multiple Products Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 341 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 35.5% 98.5th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
EVRS 75 Urgent
Rank 342 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 5.3 NVD
- EPSS
- 35.1% 98.4th percentile
- In CISA KEV since
- 2026-07-29
- CISA deadline
- 2026-08-01 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium V8 Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 343 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 34.9% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 344 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 34.5% 98.4th percentile
- In CISA KEV since
- 2025-11-10
- CISA deadline
- 2025-12-01 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Memory Vulnerability
EVRS 75 Urgent
Rank 345 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 34.2% 98.4th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
QNAP — QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
EVRS 75 Urgent
Rank 346 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 34.0% 98.4th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- QNAP
- Source
- CISA KEV
Cisco — Cisco IOS Cross-Site Request Forgery Vulnerability
EVRS 75 Urgent
Rank 347 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.1 NVD
- EPSS
- 33.9% 98.4th percentile
- In CISA KEV since
- 2026-07-13
- CISA deadline
- 2026-07-16 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
D-Link — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
EVRS 75 Urgent
Rank 348 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 33.7% 98.4th percentile
- In CISA KEV since
- 2025-08-05
- CISA deadline
- 2025-08-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds Write
EVRS 75 Urgent
Rank 349 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.5 NVD
- EPSS
- 33.6% 98.4th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Adobe — Adobe Acrobat Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 350 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 33.5% 98.4th percentile
- In CISA KEV since
- 2026-04-13
- CISA deadline
- 2026-04-27 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV