Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 451 | CVE-2025-66376Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 6.1 | 20.2% · 97.5th | 2026-03-18 | 2026-04-01CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.202. | |||||||
| 452 | CVE-2021-3199ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA federal deadline · Overdue by 12 days | 75 | 9.8 | 20.1% · 97.5th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 12 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 453 | CVE-2026-48939iCagenda — iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 20.1% · 97.4th | 2026-07-10 | 2026-07-13CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 454 | CVE-2016-4171Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 20.1% · 97.4th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 455 | CVE-2023-50224TP-Link — TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityKEV since 2025 · listed over a year | 75 | 6.5 | 20.0% · 97.4th | 2025-09-03 | 2025-09-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.200. | |||||||
| 456 | CVE-2021-21148Google — Google Chromium V8 Heap Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 20.0% · 97.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.200. | |||||||
| 457 | CVE-2025-67038Lantronix — Lantronix EDS5000 Code Injection VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 9.3 | 20.0% · 97.4th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.200. | |||||||
| 458 | CVE-2021-37976Google — Google Chromium Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 19.9% · 97.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.199. | |||||||
| 459 | CVE-2022-26871Trend Micro — Trend Micro Apex Central Arbitrary File Upload VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 19.5% · 97.4th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.195. | |||||||
| 460 | CVE-2024-20359Cisco — Cisco ASA and FTD Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 6.0 | 19.4% · 97.4th | 2024-04-24 | 2024-05-01KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.194. | |||||||
| 461 | CVE-2016-1010Adobe — Adobe Flash Player and AIR Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 19.3% · 97.3rd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.193. | |||||||
| 462 | CVE-2016-7836SKYSEA — SKYSEA Client View Improper Authentication VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 19.2% · 97.3rd | 2025-10-14 | 2025-11-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.192. | |||||||
| 463 | CVE-2026-9586Sangoma — Sangoma Switchvox SQL Injection VulnerabilityCISA federal deadline · Overdue by 48 days | 75 | 9.3 | 19.0% · 97.3rd | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 48 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.190. | |||||||
| 464 | CVE-2023-7101Spreadsheet::ParseExcel — Spreadsheet::ParseExcel Remote Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 19.0% · 97.3rd | 2024-01-02 | 2024-01-23KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.190. | |||||||
| 465 | CVE-2023-37450Apple — Apple Multiple Products WebKit Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 18.9% · 97.3rd | 2023-07-13 | 2023-08-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.190. | |||||||
| 466 | CVE-2015-5123Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 18.8% · 97.3rd | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.188. | |||||||
| 467 | CVE-2016-7892Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 18.8% · 97.3rd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.188. | |||||||
| 468 | CVE-2019-5591Fortinet — Fortinet FortiOS Default Configuration VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 6.5 | 18.6% · 97.3rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 469 | CVE-2024-7965Google — Google Chromium V8 Inappropriate Implementation VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 18.5% · 97.2nd | 2024-08-28 | 2024-09-18KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.185. | |||||||
| 470 | CVE-2022-38181Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 18.5% · 97.2nd | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.185. | |||||||
| 471 | CVE-2020-11899Treck TCP/IP stack — Treck TCP/IP stack Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 18.4% · 97.2nd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.184. | |||||||
| 472 | CVE-2018-0147Cisco — Cisco Secure Access Control System Java Deserialization VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 18.2% · 97.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.182. | |||||||
| 473 | CVE-2026-22719Broadcom — Broadcom VMware Aria Operations Command Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.1 | 18.1% · 97.2nd | 2026-03-03 | 2026-03-24CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.181. | |||||||
| 474 | CVE-2010-4345Exim — Exim Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 18.0% · 97.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.180. | |||||||
| 475 | CVE-2023-42916Apple — Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityKEV since 2023 · listed over a year | 75 | 6.5 | 17.8% · 97.2nd | 2023-12-04 | 2023-12-25KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.178. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSynacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 451 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.1 NVD
- EPSS
- 20.2% 97.5th percentile
- In CISA KEV since
- 2026-03-18
- CISA deadline
- 2026-04-01 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal Vulnerability
EVRS 75 Urgent
Rank 452 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 20.1% 97.5th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 12 days
- Ransomware use
- Not known
- Vendor
- ONLYOFFICE
- Source
- CISA KEV
iCagenda — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 453 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 10.0 NVD
- EPSS
- 20.1% 97.4th percentile
- In CISA KEV since
- 2026-07-10
- CISA deadline
- 2026-07-13 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- iCagenda
- Source
- CISA KEV
Adobe — Adobe Flash Player Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 454 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 20.1% 97.4th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
TP-Link — TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 455 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 20.0% 97.4th percentile
- In CISA KEV since
- 2025-09-03
- CISA deadline
- 2025-09-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Google — Google Chromium V8 Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 456 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 20.0% 97.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Lantronix — Lantronix EDS5000 Code Injection Vulnerability
EVRS 75 Urgent
Rank 457 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.3 NVD
- EPSS
- 20.0% 97.4th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Lantronix
- Source
- CISA KEV
Google — Google Chromium Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 458 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 19.9% 97.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Trend Micro — Trend Micro Apex Central Arbitrary File Upload Vulnerability
EVRS 75 Urgent
Rank 459 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 19.5% 97.4th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 460 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.0 NVD
- EPSS
- 19.4% 97.4th percentile
- In CISA KEV since
- 2024-04-24
- CISA deadline
- 2024-05-01 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player and AIR Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 461 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 19.3% 97.3rd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SKYSEA — SKYSEA Client View Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 462 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 19.2% 97.3rd percentile
- In CISA KEV since
- 2025-10-14
- CISA deadline
- 2025-11-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SKYSEA
- Source
- CISA KEV
Sangoma — Sangoma Switchvox SQL Injection Vulnerability
EVRS 75 Urgent
Rank 463 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.3 NVD
- EPSS
- 19.0% 97.3rd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 48 days
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
Spreadsheet::ParseExcel — Spreadsheet::ParseExcel Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 464 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 19.0% 97.3rd percentile
- In CISA KEV since
- 2024-01-02
- CISA deadline
- 2024-01-23 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Spreadsheet::ParseExcel
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Code Execution Vulnerability
EVRS 75 Urgent
Rank 465 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 18.9% 97.3rd percentile
- In CISA KEV since
- 2023-07-13
- CISA deadline
- 2023-08-03 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 466 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 18.8% 97.3rd percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 467 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 18.8% 97.3rd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Default Configuration Vulnerability
EVRS 75 Urgent
Rank 468 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 18.6% 97.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Google — Google Chromium V8 Inappropriate Implementation Vulnerability
EVRS 75 Urgent
Rank 469 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 18.5% 97.2nd percentile
- In CISA KEV since
- 2024-08-28
- CISA deadline
- 2024-09-18 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Arm — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 470 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 18.5% 97.2nd percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Treck TCP/IP stack — Treck TCP/IP stack Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 471 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.4 NVD
- EPSS
- 18.4% 97.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Treck TCP/IP stack
- Source
- CISA KEV
Cisco — Cisco Secure Access Control System Java Deserialization Vulnerability
EVRS 75 Urgent
Rank 472 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 18.2% 97.2nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Broadcom — Broadcom VMware Aria Operations Command Injection Vulnerability
EVRS 75 Urgent
Rank 473 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.1 NVD
- EPSS
- 18.1% 97.2nd percentile
- In CISA KEV since
- 2026-03-03
- CISA deadline
- 2026-03-24 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
Exim — Exim Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 474 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 18.0% 97.2nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Exim
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 475 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 17.8% 97.2nd percentile
- In CISA KEV since
- 2023-12-04
- CISA deadline
- 2023-12-25 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV