Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,954| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 476 | CVE-2010-5326SAP — SAP NetWeaver Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 10.0 | 17.8% · 97.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.178. | |||||||
| 477 | CVE-2022-27926Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 17.6% · 97.1st | 2023-04-03 | 2023-04-24KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.176. | |||||||
| 478 | CVE-2019-8605Apple — Apple Multiple Products Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 17.6% · 97.1st | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.176. | |||||||
| 479 | CVE-2021-44207Acclaim Systems — Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityKEV since 2024 · listed over a year | 75 | 8.1 | 17.6% · 97.1st | 2024-12-23 | 2025-01-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.176. | |||||||
| 480 | CVE-2025-24085Apple — Apple Multiple Products Use-After-Free VulnerabilityKEV since 2025 · listed over a year | 75 | 10.0 | 17.5% · 97.1st | 2025-01-29 | 2025-02-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.175. | |||||||
| 481 | CVE-2024-38813VMware — VMware vCenter Server Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 17.4% · 97.1st | 2024-11-20 | 2024-12-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.174. | |||||||
| 482 | CVE-2020-4006VMware — Multiple VMware Products Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 9.1 | 17.3% · 97.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.173. | |||||||
| 483 | CVE-2023-26359Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 17.0% · 97.1st | 2023-08-21 | 2023-09-11KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.170. | |||||||
| 484 | CVE-2021-30533Google — Google Chromium PopupBlocker Security Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 16.7% · 97th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.167. | |||||||
| 485 | CVE-2021-20022SonicWall — SonicWall Email Security Unrestricted Upload of File VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 7.2 | 16.6% · 97th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 486 | CVE-2023-32409Apple — Apple Multiple Products WebKit Sandbox Escape VulnerabilityKEV since 2023 · listed over a year | 75 | 8.6 | 16.5% · 97th | 2023-05-22 | 2023-06-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.165. | |||||||
| 487 | CVE-2020-27950Apple — Apple Multiple Products Memory Initialization VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 16.5% · 97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.165. | |||||||
| 488 | CVE-2023-6345Google — Google Skia Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.6 | 16.5% · 97th | 2023-11-30 | 2023-12-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.165. | |||||||
| 489 | CVE-2022-22620Apple — Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 16.3% · 97th | 2022-02-11 | 2022-02-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.163. | |||||||
| 490 | CVE-2026-48907Widget Factory — Widget Factory Joomla Content Editor Improper Access Control VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 16.2% · 96.9th | 2026-06-16 | 2026-06-19CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.162. | |||||||
| 491 | CVE-2019-8506Apple — Apple Multiple Products Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 16.2% · 96.9th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.162. | |||||||
| 492 | CVE-2019-7286Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 15.9% · 96.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.159. | |||||||
| 493 | CVE-2024-20481Cisco — Cisco ASA and FTD Denial-of-Service VulnerabilityKEV since 2024 · listed over a year | 75 | 5.8 | 15.9% · 96.9th | 2024-10-24 | 2024-11-14KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.159. | |||||||
| 494 | CVE-2010-3904Linux — Linux Kernel Improper Input Validation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 15.9% · 96.9th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.159. | |||||||
| 495 | CVE-2026-9082Drupal — Drupal Core SQL Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.8 | 15.7% · 96.9th | 2026-05-22 | 2026-05-27CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.157. | |||||||
| 496 | CVE-2026-34197Apache — Apache ActiveMQ Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.8 | 15.5% · 96.8th | 2026-04-16 | 2026-04-30CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.155. | |||||||
| 497 | CVE-2024-4947Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 9.6 | 15.2% · 96.8th | 2024-05-20 | 2024-06-10KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.152. | |||||||
| 498 | CVE-2026-34908Ubiquiti — Ubiquiti UniFi OS Improper Access Control VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 15.2% · 96.8th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.152. | |||||||
| 499 | CVE-2015-0310Adobe — Adobe Flash Player ASLR Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 15.1% · 96.7th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.151. | |||||||
| 500 | CVE-2022-20708Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.0 | 14.9% · 96.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.149. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSAP — SAP NetWeaver Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 476 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 10.0 NVD
- EPSS
- 17.8% 97.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 477 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 6.1 NVD
- EPSS
- 17.6% 97.1st percentile
- In CISA KEV since
- 2023-04-03
- CISA deadline
- 2023-04-24 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Apple — Apple Multiple Products Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 478 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 17.6% 97.1st percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Acclaim Systems — Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
EVRS 75 Urgent
Rank 479 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.1 NVD
- EPSS
- 17.6% 97.1st percentile
- In CISA KEV since
- 2024-12-23
- CISA deadline
- 2025-01-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Acclaim Systems
- Source
- CISA KEV
Apple — Apple Multiple Products Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 480 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 10.0 NVD
- EPSS
- 17.5% 97.1st percentile
- In CISA KEV since
- 2025-01-29
- CISA deadline
- 2025-02-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
VMware — VMware vCenter Server Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 481 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 17.4% 97.1st percentile
- In CISA KEV since
- 2024-11-20
- CISA deadline
- 2024-12-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
VMware — Multiple VMware Products Command Injection Vulnerability
EVRS 75 Urgent
Rank 482 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.1 NVD
- EPSS
- 17.3% 97.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 483 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 17.0% 97.1st percentile
- In CISA KEV since
- 2023-08-21
- CISA deadline
- 2023-09-11 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium PopupBlocker Security Bypass Vulnerability
EVRS 75 Urgent
Rank 484 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 6.5 NVD
- EPSS
- 16.7% 97th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
SonicWall — SonicWall Email Security Unrestricted Upload of File Vulnerability
EVRS 75 Urgent
Rank 485 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.2 NVD
- EPSS
- 16.6% 97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Sandbox Escape Vulnerability
EVRS 75 Urgent
Rank 486 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.6 NVD
- EPSS
- 16.5% 97th percentile
- In CISA KEV since
- 2023-05-22
- CISA deadline
- 2023-06-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Initialization Vulnerability
EVRS 75 Urgent
Rank 487 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 5.5 NVD
- EPSS
- 16.5% 97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Skia Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 488 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.6 NVD
- EPSS
- 16.5% 97th percentile
- In CISA KEV since
- 2023-11-30
- CISA deadline
- 2023-12-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 489 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 16.3% 97th percentile
- In CISA KEV since
- 2022-02-11
- CISA deadline
- 2022-02-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Widget Factory — Widget Factory Joomla Content Editor Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 490 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 10.0 NVD
- EPSS
- 16.2% 96.9th percentile
- In CISA KEV since
- 2026-06-16
- CISA deadline
- 2026-06-19 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Widget Factory
- Source
- CISA KEV
Apple — Apple Multiple Products Type Confusion Vulnerability
EVRS 75 Urgent
Rank 491 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 16.2% 96.9th percentile
- In CISA KEV since
- 2022-05-04
- CISA deadline
- 2022-05-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 492 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 15.9% 96.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 493 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 5.8 NVD
- EPSS
- 15.9% 96.9th percentile
- In CISA KEV since
- 2024-10-24
- CISA deadline
- 2024-11-14 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Linux — Linux Kernel Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 494 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 15.9% 96.9th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Drupal — Drupal Core SQL Injection Vulnerability
EVRS 75 Urgent
Rank 495 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 15.7% 96.9th percentile
- In CISA KEV since
- 2026-05-22
- CISA deadline
- 2026-05-27 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
Apache — Apache ActiveMQ Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 496 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 15.5% 96.8th percentile
- In CISA KEV since
- 2026-04-16
- CISA deadline
- 2026-04-30 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 497 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.6 NVD
- EPSS
- 15.2% 96.8th percentile
- In CISA KEV since
- 2024-05-20
- CISA deadline
- 2024-06-10 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 498 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 10.0 NVD
- EPSS
- 15.2% 96.8th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
Adobe — Adobe Flash Player ASLR Bypass Vulnerability
EVRS 75 Urgent
Rank 499 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 15.1% 96.7th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 500 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.0 NVD
- EPSS
- 14.9% 96.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV