Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 401 | CVE-2015-2590Oracle — Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 25.5% · 98th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.255. | |||||||
| 402 | CVE-2026-20245Cisco — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.8 | 25.3% · 97.9th | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.253. | |||||||
| 403 | CVE-2016-7855Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 25.2% · 97.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.252. | |||||||
| 404 | CVE-2022-0185Linux — Linux Kernel Heap-Based Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 75 | 8.4 | 25.2% · 97.9th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.252. | |||||||
| 405 | CVE-2019-18187Trend Micro — Trend Micro OfficeScan Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 25.1% · 97.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.251. | |||||||
| 406 | CVE-2018-5002Adobe — Adobe Flash Player Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 25.1% · 97.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.251. | |||||||
| 407 | CVE-2022-3038Google — Google Chromium Network Service Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.9% · 97.9th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.249. | |||||||
| 408 | CVE-2014-0502Adobe — Adobe Flash Player Double Free VulnerablityKEV since 2024 · listed over a year | 75 | 8.8 | 24.8% · 97.9th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.248. | |||||||
| 409 | CVE-2026-33017Langflow — Langflow Code Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 24.8% · 97.9th | 2026-03-25 | 2026-04-08CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.248. | |||||||
| 410 | CVE-2022-1096Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 24.7% · 97.9th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.247. | |||||||
| 411 | CVE-2024-27443Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 24.6% · 97.9th | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.246. | |||||||
| 412 | CVE-2023-41993Apple — Apple Multiple Products WebKit Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.3% · 97.9th | 2023-09-25 | 2023-10-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.243. | |||||||
| 413 | CVE-2016-9563SAP — SAP NetWeaver XML External Entity (XXE) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 24.2% · 97.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.242. | |||||||
| 414 | CVE-2025-4632Samsung — Samsung MagicINFO 9 Server Path Traversal VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 24.1% · 97.8th | 2025-05-22 | 2025-06-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.241. | |||||||
| 415 | CVE-2021-21166Google — Google Chromium Race Condition VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 416 | CVE-2026-60004Gitea — Gitea Code Injection VulnerabilityCISA federal deadline · Overdue by 56 days | 75 | 9.8 | 24.0% · 97.8th | 2026-08-25 | 2026-08-28CISA federal deadline · Overdue by 56 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 417 | CVE-2023-32439Apple — Apple Multiple Products WebKit Type Confusion VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 418 | CVE-2021-27878Veritas — Veritas Backup Exec Agent Command Execution VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 419 | CVE-2025-54948Trend Micro — Trend Micro Apex One OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 23.9% · 97.8th | 2025-08-18 | 2025-09-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.239. | |||||||
| 420 | CVE-2021-3560Red Hat — Red Hat Polkit Incorrect Authorization VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 23.7% · 97.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.237. | |||||||
| 421 | CVE-2016-4656Apple — Apple iOS Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 23.6% · 97.8th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.236. | |||||||
| 422 | CVE-2022-4262Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 23.5% · 97.8th | 2022-12-05 | 2022-12-26KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.235. | |||||||
| 423 | CVE-2023-28206Apple — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 8.6 | 23.2% · 97.8th | 2023-04-10 | 2023-05-01KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.232. | |||||||
| 424 | CVE-2026-19490Citrix — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 41 days | 75 | 9.3 | 23.2% · 97.8th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 41 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.232. | |||||||
| 425 | CVE-2015-5317Jenkins — Jenkins User Interface (UI) Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 75 | 7.5 | 23.0% · 97.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.230. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsOracle — Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 401 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 25.5% 98th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
EVRS 75 Urgent
Rank 402 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 25.3% 97.9th percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 403 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 25.2% 97.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Linux — Linux Kernel Heap-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 404 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.4 NVD
- EPSS
- 25.2% 97.9th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Trend Micro — Trend Micro OfficeScan Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 405 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 25.1% 97.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Adobe — Adobe Flash Player Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 406 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 25.1% 97.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium Network Service Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 407 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.9% 97.9th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Adobe — Adobe Flash Player Double Free Vulnerablity
EVRS 75 Urgent
Rank 408 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.8% 97.9th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Langflow — Langflow Code Injection Vulnerability
EVRS 75 Urgent
Rank 409 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.3 NVD
- EPSS
- 24.8% 97.9th percentile
- In CISA KEV since
- 2026-03-25
- CISA deadline
- 2026-04-08 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 410 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.7% 97.9th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 411 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 24.6% 97.9th percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Code Execution Vulnerability
EVRS 75 Urgent
Rank 412 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.3% 97.9th percentile
- In CISA KEV since
- 2023-09-25
- CISA deadline
- 2023-10-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SAP — SAP NetWeaver XML External Entity (XXE) Vulnerability
EVRS 75 Urgent
Rank 413 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 24.2% 97.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability
EVRS 75 Urgent
Rank 414 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 24.1% 97.8th percentile
- In CISA KEV since
- 2025-05-22
- CISA deadline
- 2025-06-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Google — Google Chromium Race Condition Vulnerability
EVRS 75 Urgent
Rank 415 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Gitea — Gitea Code Injection Vulnerability
EVRS 75 Urgent
Rank 416 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2026-08-25
- CISA deadline
- 2026-08-28 CISA federal deadline · Overdue by 56 days
- Ransomware use
- Not known
- Vendor
- Gitea
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Type Confusion Vulnerability
EVRS 75 Urgent
Rank 417 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent Command Execution Vulnerability
EVRS 75 Urgent
Rank 418 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 419 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 23.9% 97.8th percentile
- In CISA KEV since
- 2025-08-18
- CISA deadline
- 2025-09-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Red Hat — Red Hat Polkit Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 420 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 23.7% 97.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Apple — Apple iOS Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 421 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 23.6% 97.8th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 422 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 23.5% 97.8th percentile
- In CISA KEV since
- 2022-12-05
- CISA deadline
- 2022-12-26 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 423 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.6 NVD
- EPSS
- 23.2% 97.8th percentile
- In CISA KEV since
- 2023-04-10
- CISA deadline
- 2023-05-01 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Citrix — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 75 Urgent
Rank 424 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.3 NVD
- EPSS
- 23.2% 97.8th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 41 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Jenkins — Jenkins User Interface (UI) Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 425 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 23.0% 97.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV