Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 426 | CVE-2023-32435Apple — Apple Multiple Products WebKit Memory Corruption VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 23.0% · 97.7th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.230. | |||||||
| 427 | CVE-2021-22899Ivanti — Ivanti Pulse Connect Secure Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 22.9% · 97.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.229. | |||||||
| 428 | CVE-2024-40891Zyxel — Zyxel DSL CPE OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 22.9% · 97.7th | 2025-02-11 | 2025-03-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.229. | |||||||
| 429 | CVE-2018-19943QNAP — QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 5.4 | 22.7% · 97.7th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 430 | CVE-2024-44309Apple — Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 75 | 6.3 | 22.6% · 97.7th | 2024-11-21 | 2024-12-12KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.226. | |||||||
| 431 | CVE-2016-6367Cisco — Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 22.6% · 97.7th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.226. | |||||||
| 432 | CVE-2014-2120Cisco — Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 75 | 6.1 | 22.6% · 97.7th | 2024-11-12 | 2024-12-03KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.226. | |||||||
| 433 | CVE-2022-0609Google — Google Chromium Animation Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 22.4% · 97.7th | 2022-02-15 | 2022-03-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.224. | |||||||
| 434 | CVE-2024-37079Broadcom — Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 22.4% · 97.7th | 2026-01-23 | 2026-02-13CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.224. | |||||||
| 435 | CVE-2014-0546Adobe — Adobe Reader and Acrobat Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 22.3% · 97.7th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.223. | |||||||
| 436 | CVE-2025-14174Google — Google Chromium Out of Bounds Memory Access VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 22.3% · 97.7th | 2025-12-12 | 2026-01-02CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.223. | |||||||
| 437 | CVE-2020-24363TP-Link — TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 22.2% · 97.7th | 2025-09-02 | 2025-09-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.222. | |||||||
| 438 | CVE-2020-27930Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 22.0% · 97.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.220. | |||||||
| 439 | CVE-2025-23209Craft CMS — Craft CMS Code Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.1 | 21.8% · 97.6th | 2025-02-20 | 2025-03-13KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.218. | |||||||
| 440 | CVE-2017-6742Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 21.4% · 97.6th | 2023-04-19 | 2023-05-10KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.214. | |||||||
| 441 | CVE-2020-9377D-Link — D-Link DIR-610 Devices Remote Command ExecutionKEV since 2022 · listed over a year | 75 | 8.8 | 21.3% · 97.6th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.213. | |||||||
| 442 | CVE-2009-1862Adobe — Adobe Acrobat and Reader, Flash Player Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 21.2% · 97.6th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.212. | |||||||
| 443 | CVE-2012-5054Adobe — Adobe Flash Player Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 21.2% · 97.6th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.212. | |||||||
| 444 | CVE-2024-7971Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 9.6 | 21.1% · 97.6th | 2024-08-26 | 2024-09-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.211. | |||||||
| 445 | CVE-2025-31200Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 20.9% · 97.6th | 2025-04-17 | 2025-05-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.209. | |||||||
| 446 | CVE-2014-9163Adobe — Adobe Flash Player Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 20.7% · 97.5th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.207. | |||||||
| 447 | CVE-2024-40890Zyxel — Zyxel DSL CPE OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 20.7% · 97.5th | 2025-02-11 | 2025-03-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.207. | |||||||
| 448 | CVE-2014-8439Adobe — Adobe Flash Player Dereferenced Pointer VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 20.4% · 97.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.204. | |||||||
| 449 | CVE-2014-0196Linux — Linux Kernel Race Condition VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 20.3% · 97.5th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.203. | |||||||
| 450 | CVE-2025-7775Citrix — Citrix NetScaler Memory Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.2 | 20.3% · 97.5th | 2025-08-26 | 2025-08-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.203. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple Multiple Products WebKit Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 426 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 23.0% 97.7th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Command Injection Vulnerability
EVRS 75 Urgent
Rank 427 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.9% 97.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Zyxel — Zyxel DSL CPE OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 428 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.9% 97.7th percentile
- In CISA KEV since
- 2025-02-11
- CISA deadline
- 2025-03-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 429 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.4 NVD
- EPSS
- 22.7% 97.7th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Apple — Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 430 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.3 NVD
- EPSS
- 22.6% 97.7th percentile
- In CISA KEV since
- 2024-11-21
- CISA deadline
- 2024-12-12 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 431 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 22.6% 97.7th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 432 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.1 NVD
- EPSS
- 22.6% 97.7th percentile
- In CISA KEV since
- 2024-11-12
- CISA deadline
- 2024-12-03 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium Animation Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 433 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.4% 97.7th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-03-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Broadcom — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
EVRS 75 Urgent
Rank 434 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 22.4% 97.7th percentile
- In CISA KEV since
- 2026-01-23
- CISA deadline
- 2026-02-13 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Sandbox Bypass Vulnerability
EVRS 75 Urgent
Rank 435 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 22.3% 97.7th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium Out of Bounds Memory Access Vulnerability
EVRS 75 Urgent
Rank 436 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.3% 97.7th percentile
- In CISA KEV since
- 2025-12-12
- CISA deadline
- 2026-01-02 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
TP-Link — TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 437 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.2% 97.7th percentile
- In CISA KEV since
- 2025-09-02
- CISA deadline
- 2025-09-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 438 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 22.0% 97.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Craft CMS — Craft CMS Code Injection Vulnerability
EVRS 75 Urgent
Rank 439 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.1 NVD
- EPSS
- 21.8% 97.6th percentile
- In CISA KEV since
- 2025-02-20
- CISA deadline
- 2025-03-13 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Craft CMS
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 440 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 21.4% 97.6th percentile
- In CISA KEV since
- 2023-04-19
- CISA deadline
- 2023-05-10 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
D-Link — D-Link DIR-610 Devices Remote Command Execution
EVRS 75 Urgent
Rank 441 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 21.3% 97.6th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
EVRS 75 Urgent
Rank 442 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 21.2% 97.6th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Flash Player Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 443 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 21.2% 97.6th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 444 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.6 NVD
- EPSS
- 21.1% 97.6th percentile
- In CISA KEV since
- 2024-08-26
- CISA deadline
- 2024-09-16 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 445 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 20.9% 97.6th percentile
- In CISA KEV since
- 2025-04-17
- CISA deadline
- 2025-05-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Adobe — Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 446 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 20.7% 97.5th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Zyxel — Zyxel DSL CPE OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 447 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 20.7% 97.5th percentile
- In CISA KEV since
- 2025-02-11
- CISA deadline
- 2025-03-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Adobe — Adobe Flash Player Dereferenced Pointer Vulnerability
EVRS 75 Urgent
Rank 448 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 20.4% 97.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Linux — Linux Kernel Race Condition Vulnerability
EVRS 75 Urgent
Rank 449 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.5 NVD
- EPSS
- 20.3% 97.5th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Citrix — Citrix NetScaler Memory Overflow Vulnerability
EVRS 75 Urgent
Rank 450 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.2 NVD
- EPSS
- 20.3% 97.5th percentile
- In CISA KEV since
- 2025-08-26
- CISA deadline
- 2025-08-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV