Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 501 | CVE-2026-56291Balbooa — Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 14.9% · 96.7th | 2026-07-10 | 2026-07-13CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.149. | |||||||
| 502 | CVE-2020-3837Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 14.8% · 96.7th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.148. | |||||||
| 503 | CVE-2021-30883Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 14.7% · 96.7th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.147. | |||||||
| 504 | CVE-2018-14634Linux — Linux Kernel Integer Overflow VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 14.7% · 96.7th | 2026-01-26 | 2026-02-16CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.147. | |||||||
| 505 | CVE-2020-10181Sumavision — Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 14.7% · 96.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.147. | |||||||
| 506 | CVE-2024-8069Citrix — Citrix Session Recording Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 75 | 5.1 | 14.6% · 96.7th | 2025-08-25 | 2025-09-15KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.146. | |||||||
| 507 | CVE-2026-18577N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.2 | 14.6% · 96.7th | 2026-08-03 | 2026-08-06CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.146. | |||||||
| 508 | CVE-2026-82329JFrog — JFrog Artifactory Improper Authentication VulnerabilityCISA federal deadline · Overdue by 48 days | 75 | 9.8 | 14.4% · 96.6th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 48 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.144. | |||||||
| 509 | CVE-2023-28204Apple — Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityKEV since 2023 · listed over a year | 75 | 6.5 | 14.3% · 96.6th | 2023-05-22 | 2023-06-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.143. | |||||||
| 510 | CVE-2022-26485Mozilla — Mozilla Firefox Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 14.3% · 96.6th | 2022-03-07 | 2022-03-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.143. | |||||||
| 511 | CVE-2018-0151Cisco — Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 14.2% · 96.6th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.142. | |||||||
| 512 | CVE-2021-22900Ivanti — Ivanti Pulse Connect Secure Unrestricted File Upload VulnerabilityKEV since 2021 · listed over a year | 75 | 7.2 | 14.1% · 96.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.141. | |||||||
| 513 | CVE-2025-6554Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2025 · listed over a year | 75 | 8.1 | 14.1% · 96.6th | 2025-07-02 | 2025-07-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.141. | |||||||
| 514 | CVE-2026-76460Cisco — Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCISA federal deadline · Overdue by 34 days | 75 | 10.0 | 14.0% · 96.6th | 2026-09-16 | 2026-09-19CISA federal deadline · Overdue by 34 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.140. | |||||||
| 515 | CVE-2021-1789Apple — Apple Multiple Products Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 14.0% · 96.5th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.140. | |||||||
| 516 | CVE-2022-1364Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 13.9% · 96.5th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.139. | |||||||
| 517 | CVE-2025-31201Apple — Apple Multiple Products Arbitrary Read and Write VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 13.9% · 96.5th | 2025-04-17 | 2025-05-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.139. | |||||||
| 518 | CVE-2019-9875Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 13.8% · 96.5th | 2025-03-26 | 2025-04-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.138. | |||||||
| 519 | CVE-2017-12240Cisco — Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 13.8% · 96.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.138. | |||||||
| 520 | CVE-2024-12686BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 13.7% · 96.5th | 2025-01-13 | 2025-02-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.137. | |||||||
| 521 | CVE-2023-20867VMware — VMware Tools Authentication Bypass VulnerabilityKEV since 2023 · listed over a year | 75 | 3.9 | 13.6% · 96.5th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.136. | |||||||
| 522 | CVE-2015-4902Oracle — Oracle Java SE Integrity Check VulnerabilityKEV since 2022 · listed over a year | 75 | 5.3 | 13.6% · 96.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.136. | |||||||
| 523 | CVE-2026-22769Dell — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 10.0 | 13.5% · 96.4th | 2026-02-18 | 2026-02-21CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.135. | |||||||
| 524 | CVE-2021-27876Veritas — Veritas Backup Exec Agent File Access VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.1 | 13.5% · 96.4th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 525 | CVE-2019-3010Oracle — Oracle Solaris Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 13.4% · 96.4th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsBalbooa — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 501 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 10.0 NVD
- EPSS
- 14.9% 96.7th percentile
- In CISA KEV since
- 2026-07-10
- CISA deadline
- 2026-07-13 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Balbooa
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 502 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 14.8% 96.7th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 503 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 14.7% 96.7th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 504 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 14.7% 96.7th percentile
- In CISA KEV since
- 2026-01-26
- CISA deadline
- 2026-02-16 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Sumavision — Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
EVRS 75 Urgent
Rank 505 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 14.7% 96.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sumavision
- Source
- CISA KEV
Citrix — Citrix Session Recording Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 506 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.1 NVD
- EPSS
- 14.6% 96.7th percentile
- In CISA KEV since
- 2025-08-25
- CISA deadline
- 2025-09-15 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 75 Urgent
Rank 507 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.2 NVD
- EPSS
- 14.6% 96.7th percentile
- In CISA KEV since
- 2026-08-03
- CISA deadline
- 2026-08-06 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 508 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 14.4% 96.6th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 48 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 509 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 14.3% 96.6th percentile
- In CISA KEV since
- 2023-05-22
- CISA deadline
- 2023-06-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Mozilla — Mozilla Firefox Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 510 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 14.3% 96.6th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-03-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 511 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 14.2% 96.6th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
EVRS 75 Urgent
Rank 512 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.2 NVD
- EPSS
- 14.1% 96.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 513 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.1 NVD
- EPSS
- 14.1% 96.6th percentile
- In CISA KEV since
- 2025-07-02
- CISA deadline
- 2025-07-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
EVRS 75 Urgent
Rank 514 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 10.0 NVD
- EPSS
- 14.0% 96.6th percentile
- In CISA KEV since
- 2026-09-16
- CISA deadline
- 2026-09-19 CISA federal deadline · Overdue by 34 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Multiple Products Type Confusion Vulnerability
EVRS 75 Urgent
Rank 515 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 14.0% 96.5th percentile
- In CISA KEV since
- 2022-05-04
- CISA deadline
- 2022-05-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 516 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.9% 96.5th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple Multiple Products Arbitrary Read and Write Vulnerability
EVRS 75 Urgent
Rank 517 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 13.9% 96.5th percentile
- In CISA KEV since
- 2025-04-17
- CISA deadline
- 2025-05-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
EVRS 75 Urgent
Rank 518 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.8% 96.5th percentile
- In CISA KEV since
- 2025-03-26
- CISA deadline
- 2025-04-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sitecore
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 519 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 13.8% 96.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 520 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.2 NVD
- EPSS
- 13.7% 96.5th percentile
- In CISA KEV since
- 2025-01-13
- CISA deadline
- 2025-02-03 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
VMware — VMware Tools Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 521 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 3.9 NVD
- EPSS
- 13.6% 96.5th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Oracle — Oracle Java SE Integrity Check Vulnerability
EVRS 75 Urgent
Rank 522 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.3 NVD
- EPSS
- 13.6% 96.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Dell — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
EVRS 75 Urgent
Rank 523 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 10.0 NVD
- EPSS
- 13.5% 96.4th percentile
- In CISA KEV since
- 2026-02-18
- CISA deadline
- 2026-02-21 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Dell
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent File Access Vulnerability
EVRS 75 Urgent
Rank 524 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.1 NVD
- EPSS
- 13.5% 96.4th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
Oracle — Oracle Solaris Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 525 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV