Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 676 | CVE-2026-20045Cisco — Cisco Unified Communications Products Code Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 4.5% · 91.5th | 2026-01-21 | 2026-02-11CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.045. | |||||||
| 677 | CVE-2021-30661Apple — Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 4.5% · 91.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.045. | |||||||
| 678 | CVE-2023-46748F5 — F5 BIG-IP Configuration Utility SQL Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 4.5% · 91.4th | 2023-10-31 | 2023-11-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.045. | |||||||
| 679 | CVE-2025-24200Apple — Apple iOS and iPadOS Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 4.4% · 91.3rd | 2025-02-12 | 2025-03-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.044. | |||||||
| 680 | CVE-2023-41061Apple — Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 4.4% · 91.3rd | 2023-09-11 | 2023-10-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.044. | |||||||
| 681 | CVE-2025-48384Git — Git Link Following VulnerabilityKEV since 2025 · listed over a year | 75 | 8.0 | 4.4% · 91.2nd | 2025-08-25 | 2025-09-15KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.044. | |||||||
| 682 | CVE-2024-20399Cisco — Cisco NX-OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 6.7 | 4.3% · 91.1st | 2024-07-02 | 2024-07-23KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.043. | |||||||
| 683 | CVE-2023-41179Trend Micro — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 7.2 | 4.3% · 91st | 2023-09-21 | 2023-10-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.043. | |||||||
| 684 | CVE-2021-20035SonicWall — SonicWall SMA100 Appliances OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 6.5 | 4.2% · 90.9th | 2025-04-16 | 2025-05-07KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.042. | |||||||
| 685 | CVE-2021-30869Apple — Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 4.1% · 90.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.041. | |||||||
| 686 | CVE-2024-53197Linux — Linux Kernel Out-of-Bounds Access VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 4.1% · 90.7th | 2025-04-09 | 2025-04-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.041. | |||||||
| 687 | CVE-2018-0161Cisco — Cisco IOS Software Resource Management Errors VulnerabilityKEV since 2022 · listed over a year | 75 | 6.3 | 4.1% · 90.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.041. | |||||||
| 688 | CVE-2025-27915Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityKEV since 2025 · listed over a year | 75 | 5.4 | 4.1% · 90.6th | 2025-10-07 | 2025-10-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.041. | |||||||
| 689 | CVE-2023-43000Apple — Apple Multiple products Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 4.0% · 90.6th | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 690 | CVE-2026-3055Citrix — Citrix NetScaler Out-of-Bounds Read VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 4.0% · 90.6th | 2026-03-30 | 2026-04-02CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 691 | CVE-2025-2749Kentico — Kentico Xperience Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.2 | 4.0% · 90.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 692 | CVE-2019-7483SonicWall — SonicWall SMA100 Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 4.0% · 90.5th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 693 | CVE-2024-39717Versa — Versa Director Dangerous File Type Upload VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 4.0% · 90.5th | 2024-08-23 | 2024-09-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 694 | CVE-2021-27137DD-WRT — DD-WRT Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.1 | 4.0% · 90.5th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 695 | CVE-2026-75650Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCISA federal deadline · Overdue by 41 days | 75 | 10.0 | 3.9% · 90.4th | 2026-09-08 | 2026-09-11CISA federal deadline · Overdue by 41 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.039. | |||||||
| 696 | CVE-2024-20953Oracle — Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 3.9% · 90.3rd | 2025-02-24 | 2025-03-17KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.039. | |||||||
| 697 | CVE-2025-24201Apple — Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 10.0 | 3.8% · 90.1st | 2025-03-13 | 2025-04-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.038. | |||||||
| 698 | CVE-2024-9537ScienceLogic — ScienceLogic SL1 Unspecified VulnerabilityKEV since 2024 · listed over a year | 75 | 9.3 | 3.8% · 90th | 2024-10-21 | 2024-11-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.038. | |||||||
| 699 | CVE-2024-0519Google — Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 3.8% · 90th | 2024-01-17 | 2024-02-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.038. | |||||||
| 700 | CVE-2025-25249Fortinet — Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 40 days | 75 | 9.8 | 3.8% · 90th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.038. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco Unified Communications Products Code Injection Vulnerability
EVRS 75 Urgent
Rank 676 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.5% 91.5th percentile
- In CISA KEV since
- 2026-01-21
- CISA deadline
- 2026-02-11 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 677 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.5% 91.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
F5 — F5 BIG-IP Configuration Utility SQL Injection Vulnerability
EVRS 75 Urgent
Rank 678 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.5% 91.4th percentile
- In CISA KEV since
- 2023-10-31
- CISA deadline
- 2023-11-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 679 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.1 NVD
- EPSS
- 4.4% 91.3rd percentile
- In CISA KEV since
- 2025-02-12
- CISA deadline
- 2025-03-05 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
EVRS 75 Urgent
Rank 680 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 4.4% 91.3rd percentile
- In CISA KEV since
- 2023-09-11
- CISA deadline
- 2023-10-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Git — Git Link Following Vulnerability
EVRS 75 Urgent
Rank 681 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.0 NVD
- EPSS
- 4.4% 91.2nd percentile
- In CISA KEV since
- 2025-08-25
- CISA deadline
- 2025-09-15 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Git
- Source
- CISA KEV
Cisco — Cisco NX-OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 682 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.7 NVD
- EPSS
- 4.3% 91.1st percentile
- In CISA KEV since
- 2024-07-02
- CISA deadline
- 2024-07-23 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 683 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 4.3% 91st percentile
- In CISA KEV since
- 2023-09-21
- CISA deadline
- 2023-10-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
SonicWall — SonicWall SMA100 Appliances OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 684 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.5 NVD
- EPSS
- 4.2% 90.9th percentile
- In CISA KEV since
- 2025-04-16
- CISA deadline
- 2025-05-07 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
EVRS 75 Urgent
Rank 685 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 4.1% 90.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Access Vulnerability
EVRS 75 Urgent
Rank 686 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 4.1% 90.7th percentile
- In CISA KEV since
- 2025-04-09
- CISA deadline
- 2025-04-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Cisco — Cisco IOS Software Resource Management Errors Vulnerability
EVRS 75 Urgent
Rank 687 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.3 NVD
- EPSS
- 4.1% 90.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 688 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 5.4 NVD
- EPSS
- 4.1% 90.6th percentile
- In CISA KEV since
- 2025-10-07
- CISA deadline
- 2025-10-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Apple — Apple Multiple products Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 689 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.0% 90.6th percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Citrix — Citrix NetScaler Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 690 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.3 NVD
- EPSS
- 4.0% 90.6th percentile
- In CISA KEV since
- 2026-03-30
- CISA deadline
- 2026-04-02 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Kentico — Kentico Xperience Path Traversal Vulnerability
EVRS 75 Urgent
Rank 691 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
SonicWall — SonicWall SMA100 Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 692 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.5 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Versa — Versa Director Dangerous File Type Upload Vulnerability
EVRS 75 Urgent
Rank 693 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2024-08-23
- CISA deadline
- 2024-09-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Versa
- Source
- CISA KEV
DD-WRT — DD-WRT Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 694 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.1 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-07-24 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- DD-WRT
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
EVRS 75 Urgent
Rank 695 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 10.0 NVD
- EPSS
- 3.9% 90.4th percentile
- In CISA KEV since
- 2026-09-08
- CISA deadline
- 2026-09-11 CISA federal deadline · Overdue by 41 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
EVRS 75 Urgent
Rank 696 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.9% 90.3rd percentile
- In CISA KEV since
- 2025-02-24
- CISA deadline
- 2025-03-17 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 697 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 10.0 NVD
- EPSS
- 3.8% 90.1st percentile
- In CISA KEV since
- 2025-03-13
- CISA deadline
- 2025-04-03 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
ScienceLogic — ScienceLogic SL1 Unspecified Vulnerability
EVRS 75 Urgent
Rank 698 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.3 NVD
- EPSS
- 3.8% 90th percentile
- In CISA KEV since
- 2024-10-21
- CISA deadline
- 2024-11-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- ScienceLogic
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
EVRS 75 Urgent
Rank 699 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.8% 90th percentile
- In CISA KEV since
- 2024-01-17
- CISA deadline
- 2024-02-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 700 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.8 NVD
- EPSS
- 3.8% 90th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
