Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 651 | CVE-2019-15271Cisco — Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 5.5% · 92.7th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.055. | |||||||
| 652 | CVE-2021-28664Arm — Arm Mali Graphics Processing Unit (GPU) Unspecified VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 5.4% · 92.7th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.054. | |||||||
| 653 | CVE-2025-10585Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 5.4% · 92.6th | 2025-09-23 | 2025-10-14KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.054. | |||||||
| 654 | CVE-2026-60137WordPress — WordPress Core SQL Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 5.9 | 5.3% · 92.6th | 2026-07-21 | 2026-08-04CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.053. | |||||||
| 655 | CVE-2026-25108Soliton Systems K.K — Soliton Systems K.K FileZen OS Command Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.7 | 5.2% · 92.5th | 2026-02-24 | 2026-03-17CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.052. | |||||||
| 656 | CVE-2017-12319Cisco — Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 5.9 | 5.2% · 92.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.052. | |||||||
| 657 | CVE-2021-30900Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 5.2% · 92.5th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.052. | |||||||
| 658 | CVE-2025-54313Prettier — Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.5 | 5.1% · 92.4th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.051. | |||||||
| 659 | CVE-2015-5287Red Hat — Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityCISA federal deadline · Overdue by 44 days | 75 | 7.8 | 5.0% · 92.2nd | 2026-08-26 | 2026-09-09CISA federal deadline · Overdue by 44 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.050. | |||||||
| 660 | CVE-2021-36741Trend Micro — Trend Micro Multiple Products Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 5.0% · 92.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.050. | |||||||
| 661 | CVE-2019-16256SIMalliance — SIMalliance Toolbox Browser Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 4.9% · 92.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 662 | CVE-2021-38000Google — Google Chromium Intents Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 4.9% · 92.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 663 | CVE-2018-0179Cisco — Cisco IOS Software Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 5.9 | 4.9% · 92.1st | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 664 | CVE-2018-0180Cisco — Cisco IOS Software Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 5.9 | 4.9% · 92.1st | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 665 | CVE-2025-47827IGEL — IGEL OS Use of a Key Past its Expiration Date VulnerabilityKEV since 2025 · listed over a year | 75 | 4.6 | 4.9% · 92.1st | 2025-10-14 | 2025-11-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 666 | CVE-2025-13223Google — Google Chromium V8 Type Confusion VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 4.9% · 92.1st | 2025-11-19 | 2025-12-10CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 667 | CVE-2020-1631Juniper — Juniper Junos OS Path Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 4.9% · 92nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 668 | CVE-2004-1464Cisco — Cisco IOS Denial-of-Service VulnerabilityKEV since 2023 · listed over a year | 75 | 5.9 | 4.8% · 92nd | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.048. | |||||||
| 669 | CVE-2023-45727North Grid — North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityKEV since 2024 · listed over a year | 75 | 7.5 | 4.8% · 91.9th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.048. | |||||||
| 670 | CVE-2013-3993IBM — IBM InfoSphere BigInsights Invalid Input VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 4.8% · 91.9th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 671 | CVE-2025-55177Meta Platforms — Meta Platforms WhatsApp Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.7% · 91.8th | 2025-09-02 | 2025-09-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.047. | |||||||
| 672 | CVE-2019-18988TeamViewer — TeamViewer Desktop Bypass Remote Login VulnerabilityKEV since 2021 · listed over a year | 75 | 7.0 | 4.7% · 91.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.047. | |||||||
| 673 | CVE-2012-0518Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 4.7 | 4.7% · 91.7th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.047. | |||||||
| 674 | CVE-2019-7287Apple — Apple iOS Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 4.6% · 91.6th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.046. | |||||||
| 675 | CVE-2022-2856Google — Google Chromium Intents Insufficient Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 4.6% · 91.6th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.046. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 651 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 5.5% 92.7th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Arm — Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
EVRS 75 Urgent
Rank 652 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 5.4% 92.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 653 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 5.4% 92.6th percentile
- In CISA KEV since
- 2025-09-23
- CISA deadline
- 2025-10-14 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
WordPress — WordPress Core SQL Injection Vulnerability
EVRS 75 Urgent
Rank 654 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.9 NVD
- EPSS
- 5.3% 92.6th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-08-04 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Soliton Systems K.K — Soliton Systems K.K FileZen OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 655 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.7 NVD
- EPSS
- 5.2% 92.5th percentile
- In CISA KEV since
- 2026-02-24
- CISA deadline
- 2026-03-17 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Soliton Systems K.K
- Source
- CISA KEV
Cisco — Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 656 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.9 NVD
- EPSS
- 5.2% 92.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 657 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.2% 92.5th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Prettier — Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 658 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.5 NVD
- EPSS
- 5.1% 92.4th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Prettier
- Source
- CISA KEV
Red Hat — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 659 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.0% 92.2nd percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-09-09 CISA federal deadline · Overdue by 44 days
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 660 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 5.0% 92.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
SIMalliance — SIMalliance Toolbox Browser Command Injection Vulnerability
EVRS 75 Urgent
Rank 661 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SIMalliance
- Source
- CISA KEV
Google — Google Chromium Intents Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 662 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 6.1 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco IOS Software Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 663 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.9 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 664 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.9 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
IGEL — IGEL OS Use of a Key Past its Expiration Date Vulnerability
EVRS 75 Urgent
Rank 665 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 4.6 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2025-10-14
- CISA deadline
- 2025-11-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- IGEL
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 666 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.9% 92.1st percentile
- In CISA KEV since
- 2025-11-19
- CISA deadline
- 2025-12-10 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Juniper — Juniper Junos OS Path Traversal Vulnerability
EVRS 75 Urgent
Rank 667 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.9% 92nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
Cisco — Cisco IOS Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 668 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.9 NVD
- EPSS
- 4.8% 92nd percentile
- In CISA KEV since
- 2023-05-19
- CISA deadline
- 2023-06-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
North Grid — North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
EVRS 75 Urgent
Rank 669 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.5 NVD
- EPSS
- 4.8% 91.9th percentile
- In CISA KEV since
- 2024-12-03
- CISA deadline
- 2024-12-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- North Grid
- Source
- CISA KEV
IBM — IBM InfoSphere BigInsights Invalid Input Vulnerability
EVRS 75 Urgent
Rank 670 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 6.5 NVD
- EPSS
- 4.8% 91.9th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- IBM
- Source
- CISA KEV
Meta Platforms — Meta Platforms WhatsApp Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 671 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.4 NVD
- EPSS
- 4.7% 91.8th percentile
- In CISA KEV since
- 2025-09-02
- CISA deadline
- 2025-09-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Meta Platforms
- Source
- CISA KEV
TeamViewer — TeamViewer Desktop Bypass Remote Login Vulnerability
EVRS 75 Urgent
Rank 672 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.0 NVD
- EPSS
- 4.7% 91.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- TeamViewer
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 75 Urgent
Rank 673 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 4.7 NVD
- EPSS
- 4.7% 91.7th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apple — Apple iOS Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 674 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 4.6% 91.6th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium Intents Insufficient Input Validation Vulnerability
EVRS 75 Urgent
Rank 675 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 6.5 NVD
- EPSS
- 4.6% 91.6th percentile
- In CISA KEV since
- 2022-08-18
- CISA deadline
- 2022-09-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
