Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 551 | CVE-2017-6743Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 552 | CVE-2022-23176WatchGuard — WatchGuard Firebox and XTM Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.8% · 95.8th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.108. | |||||||
| 553 | CVE-2017-1000253Linux — Linux Kernel PIE Stack Buffer Corruption VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.8 | 10.7% · 95.8th | 2024-09-09 | 2024-09-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 554 | CVE-2022-41328Fortinet — Fortinet FortiOS Path Traversal VulnerabilityKEV since 2023 · listed over a year | 75 | 7.1 | 10.7% · 95.8th | 2023-03-14 | 2023-04-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.107. | |||||||
| 555 | CVE-2020-15069Sophos — Sophos XG Firewall Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 10.7% · 95.8th | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.107. | |||||||
| 556 | CVE-2022-41223Mitel — Mitel MiVoice Connect Code Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 6.8 | 10.7% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 557 | CVE-2026-63030WordPress — WordPress Core Interpretation Conflict VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 10.6% · 95.8th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.106. | |||||||
| 558 | CVE-2024-23222Apple — Apple Multiple Products WebKit Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.6% · 95.8th | 2024-01-23 | 2024-02-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.106. | |||||||
| 559 | CVE-2020-6572Google — Google Chrome Media Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.6% · 95.8th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.106. | |||||||
| 560 | CVE-2022-40765Mitel — Mitel MiVoice Connect Command Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 6.8 | 10.6% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 561 | CVE-2025-6543Citrix — Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.2 | 10.6% · 95.8th | 2025-06-30 | 2025-07-21KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.106. | |||||||
| 562 | CVE-2021-30761Apple — Apple iOS WebKit Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.5% · 95.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.105. | |||||||
| 563 | CVE-2013-0643Adobe — Adobe Flash Player Incorrect Default Permissions VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.5% · 95.8th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.105. | |||||||
| 564 | CVE-2020-27932Apple — Apple Multiple Products Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 10.3% · 95.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.103. | |||||||
| 565 | CVE-2022-2586Linux — Linux Kernel Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 10.2% · 95.7th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.102. | |||||||
| 566 | CVE-2024-44308Apple — Apple Multiple Products Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 10.2% · 95.7th | 2024-11-21 | 2024-12-12KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.102. | |||||||
| 567 | CVE-2024-6047GeoVision — GeoVision Devices OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 10.1% · 95.6th | 2025-05-07 | 2025-05-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.101. | |||||||
| 568 | CVE-2020-3433Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 10.0% · 95.6th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 569 | CVE-2026-64849MLflow — MLflow Server-Side Request Forgery VulnerabilityCISA federal deadline · Overdue by 51 days | 75 | 9.3 | 10.0% · 95.6th | 2026-08-19 | 2026-09-02CISA federal deadline · Overdue by 51 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.100. | |||||||
| 570 | CVE-2021-21193Google — Google Chromium Blink Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.0% · 95.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.100. | |||||||
| 571 | CVE-2022-32893Apple — Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 9.9% · 95.6th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.099. | |||||||
| 572 | CVE-2026-83549SonicWall — SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCISA federal deadline · Overdue by 48 days | 75 | 7.8 | 9.9% · 95.6th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 48 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.099. | |||||||
| 573 | CVE-2015-1130Apple — Apple OS X Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 9.9% · 95.6th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.099. | |||||||
| 574 | CVE-2026-42018JFrog — JFrog Artifactory Improper Authentication VulnerabilityCISA federal deadline · Overdue by 28 days | 75 | 7.5 | 9.8% · 95.5th | 2026-09-11 | 2026-09-25CISA federal deadline · Overdue by 28 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.098. | |||||||
| 575 | CVE-2022-20701Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 9.7% · 95.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.097. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 551 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox and XTM Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 552 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.8% 95.8th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Linux — Linux Kernel PIE Stack Buffer Corruption Vulnerability
EVRS 75 Urgent
Rank 553 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2024-09-09
- CISA deadline
- 2024-09-30 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Linux
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Path Traversal Vulnerability
EVRS 75 Urgent
Rank 554 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.1 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2023-03-14
- CISA deadline
- 2023-04-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Sophos — Sophos XG Firewall Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 555 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2025-02-06
- CISA deadline
- 2025-02-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Code Injection Vulnerability
EVRS 75 Urgent
Rank 556 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.8 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2023-02-21
- CISA deadline
- 2023-03-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
WordPress — WordPress Core Interpretation Conflict Vulnerability
EVRS 75 Urgent
Rank 557 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-07-24 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Type Confusion Vulnerability
EVRS 75 Urgent
Rank 558 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2024-01-23
- CISA deadline
- 2024-02-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chrome Media Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 559 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Command Injection Vulnerability
EVRS 75 Urgent
Rank 560 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2023-02-21
- CISA deadline
- 2023-03-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 561 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.2 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2025-06-30
- CISA deadline
- 2025-07-21 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Apple — Apple iOS WebKit Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 562 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.5% 95.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Adobe — Adobe Flash Player Incorrect Default Permissions Vulnerability
EVRS 75 Urgent
Rank 563 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.5% 95.8th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apple — Apple Multiple Products Type Confusion Vulnerability
EVRS 75 Urgent
Rank 564 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.3% 95.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 565 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.2% 95.7th percentile
- In CISA KEV since
- 2024-06-26
- CISA deadline
- 2024-07-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Apple — Apple Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 566 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.2% 95.7th percentile
- In CISA KEV since
- 2024-11-21
- CISA deadline
- 2024-12-12 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
GeoVision — GeoVision Devices OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 567 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 10.1% 95.6th percentile
- In CISA KEV since
- 2025-05-07
- CISA deadline
- 2025-05-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- GeoVision
- Source
- CISA KEV
Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
EVRS 75 Urgent
Rank 568 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.0% 95.6th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
MLflow — MLflow Server-Side Request Forgery Vulnerability
EVRS 75 Urgent
Rank 569 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.3 NVD
- EPSS
- 10.0% 95.6th percentile
- In CISA KEV since
- 2026-08-19
- CISA deadline
- 2026-09-02 CISA federal deadline · Overdue by 51 days
- Ransomware use
- Not known
- Vendor
- MLflow
- Source
- CISA KEV
Google — Google Chromium Blink Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 570 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.0% 95.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS and macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 571 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 9.9% 95.6th percentile
- In CISA KEV since
- 2022-08-18
- CISA deadline
- 2022-09-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 572 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 9.9% 95.6th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 48 days
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple OS X Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 573 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 9.9% 95.6th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 574 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 9.8% 95.5th percentile
- In CISA KEV since
- 2026-09-11
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 28 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 575 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 9.7% 95.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
