Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 526 | CVE-2023-41991Apple — Apple Multiple Products Improper Certificate Validation VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 13.4% · 96.4th | 2023-09-25 | 2023-10-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
| 527 | CVE-2021-30858Apple — Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 13.4% · 96.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
| 528 | CVE-2026-86218N-able — N-able N-central Static Code Injection VulnerabilityCISA federal deadline · Overdue by 42 days | 75 | 10.0 | 13.3% · 96.4th | 2026-09-08 | 2026-09-11CISA federal deadline · Overdue by 42 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.133. | |||||||
| 529 | CVE-2022-22948VMware — VMware vCenter Server Incorrect Default File Permissions VulnerabilityKEV since 2024 · listed over a year | 75 | 6.5 | 13.3% · 96.4th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.133. | |||||||
| 530 | CVE-2026-21589Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 9.3 | 12.7% · 96.3rd | 2026-10-15 | 2026-10-18CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.127. | |||||||
| 531 | CVE-2022-22675Apple — Apple macOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 12.5% · 96.2nd | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.125. | |||||||
| 532 | CVE-2022-20775Cisco — Cisco SD-WAN Path Traversal VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 12.5% · 96.2nd | 2026-02-25 | 2026-02-27CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.125. | |||||||
| 533 | CVE-2023-32373Apple — Apple Multiple Products WebKit Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 12.2% · 96.2nd | 2023-05-22 | 2023-06-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.122. | |||||||
| 534 | CVE-2021-28663Arm — Arm Mali Graphics Processing Unit (GPU) Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 12.1% · 96.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.121. | |||||||
| 535 | CVE-2017-11292Adobe — Adobe Flash Player Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 11.9% · 96.1st | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.119. | |||||||
| 536 | CVE-2020-8599Trend Micro — Trend Micro Apex One and OfficeScan Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 11.9% · 96.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.119. | |||||||
| 537 | CVE-2026-15410SonicWall — SonicWall SMA1000 Appliances Code Injection VulnerabilityRansomwareCISA federal deadline · Overdue by 3 months | 75 | 7.2 | 11.8% · 96.1st | 2026-07-14 | 2026-07-17CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 538 | CVE-2021-37973Google — Google Chromium Portals Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 11.7% · 96.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.117. | |||||||
| 539 | CVE-2020-3118Cisco — Cisco IOS XR Software Discovery Protocol Format String VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 11.7% · 96.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.117. | |||||||
| 540 | CVE-2022-22587Apple — Apple Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 11.6% · 96th | 2022-01-28 | 2022-02-11KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.116. | |||||||
| 541 | CVE-2022-20821Cisco — Cisco IOS XR Open Port VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 11.5% · 96th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.115. | |||||||
| 542 | CVE-2025-48927TeleMessage — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityKEV since 2025 · listed over a year | 75 | 5.3 | 11.1% · 95.9th | 2025-07-01 | 2025-07-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 543 | CVE-2017-6740Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 11.1% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 544 | CVE-2013-0648Adobe — Adobe Flash Player Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.1% · 95.9th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 545 | CVE-2024-4761Google — Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.110. | |||||||
| 546 | CVE-2021-30762Apple — Apple iOS WebKit Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.110. | |||||||
| 547 | CVE-2025-6558Google — Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 548 | CVE-2020-8467Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 549 | CVE-2017-6738Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 550 | CVE-2017-6739Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple Multiple Products Improper Certificate Validation Vulnerability
EVRS 75 Urgent
Rank 526 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 5.5 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2023-09-25
- CISA deadline
- 2023-10-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 527 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
N-able — N-able N-central Static Code Injection Vulnerability
EVRS 75 Urgent
Rank 528 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 10.0 NVD
- EPSS
- 13.3% 96.4th percentile
- In CISA KEV since
- 2026-09-08
- CISA deadline
- 2026-09-11 CISA federal deadline · Overdue by 42 days
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
VMware — VMware vCenter Server Incorrect Default File Permissions Vulnerability
EVRS 75 Urgent
Rank 529 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 6.5 NVD
- EPSS
- 13.3% 96.4th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
EVRS 75 Urgent
Rank 530 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.3 NVD
- EPSS
- 12.7% 96.3rd percentile
- In CISA KEV since
- 2026-10-15
- CISA deadline
- 2026-10-18 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
Apple — Apple macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 531 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.8 NVD
- EPSS
- 12.5% 96.2nd percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco SD-WAN Path Traversal Vulnerability
EVRS 75 Urgent
Rank 532 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.8 NVD
- EPSS
- 12.5% 96.2nd percentile
- In CISA KEV since
- 2026-02-25
- CISA deadline
- 2026-02-27 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 533 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 12.2% 96.2nd percentile
- In CISA KEV since
- 2023-05-22
- CISA deadline
- 2023-06-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Arm — Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 534 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 12.1% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Adobe — Adobe Flash Player Type Confusion Vulnerability
EVRS 75 Urgent
Rank 535 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.9% 96.1st percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 536 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.9% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Code Injection Vulnerability
EVRS 75 Urgent
Rank 537 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.2 NVD
- EPSS
- 11.8% 96.1st percentile
- In CISA KEV since
- 2026-07-14
- CISA deadline
- 2026-07-17 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Google — Google Chromium Portals Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 538 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.6 NVD
- EPSS
- 11.7% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco IOS XR Software Discovery Protocol Format String Vulnerability
EVRS 75 Urgent
Rank 539 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.7% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 540 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.6% 96th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-02-11 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS XR Open Port Vulnerability
EVRS 75 Urgent
Rank 541 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 6.5 NVD
- EPSS
- 11.5% 96th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
TeleMessage — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
EVRS 75 Urgent
Rank 542 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 5.3 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2025-07-01
- CISA deadline
- 2025-07-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TeleMessage
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 543 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player Code Execution Vulnerability
EVRS 75 Urgent
Rank 544 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
EVRS 75 Urgent
Rank 545 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.0% 95.9th percentile
- In CISA KEV since
- 2024-05-16
- CISA deadline
- 2024-06-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 546 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.0% 95.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 547 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2025-07-22
- CISA deadline
- 2025-08-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 548 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 549 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 550 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV