Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 701 | CVE-2021-30665Apple — Apple Multiple Products WebKit Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 3.7% · 89.7th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.037. | |||||||
| 702 | CVE-2020-3566Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.6 | 3.7% · 89.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.037. | |||||||
| 703 | CVE-2018-19321GIGABYTE — GIGABYTE Multiple Products Privilege Escalation VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 3.7% · 89.7th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 704 | CVE-2016-3643SolarWinds — SolarWinds Virtualization Manager Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 3.7% · 89.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.037. | |||||||
| 705 | CVE-2021-31010Apple — Apple iOS, macOS, watchOS Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 3.7% · 89.6th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.037. | |||||||
| 706 | CVE-2023-0266Linux — Linux Kernel Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 7.0 | 3.7% · 89.6th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.037. | |||||||
| 707 | CVE-2021-27102Accellion — Accellion FTA OS Command Injection VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 7.8 | 3.7% · 89.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 708 | CVE-2016-8562Siemens — Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 3.6% · 89.4th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.036. | |||||||
| 709 | CVE-2023-22894Strapi — Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA federal deadline · Overdue by 11 days | 75 | 4.9 | 3.6% · 89.4th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 11 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.036. | |||||||
| 710 | CVE-2018-19320GIGABYTE — GIGABYTE Multiple Products Unspecified VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 3.6% · 89.4th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 711 | CVE-2025-3935ConnectWise — ConnectWise ScreenConnect Improper Authentication VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 3.5% · 89.2nd | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.035. | |||||||
| 712 | CVE-2021-30663Apple — Apple Multiple Products WebKit Integer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 3.5% · 89.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.035. | |||||||
| 713 | CVE-2024-8068Citrix — Citrix Session Recording Improper Privilege Management VulnerabilityKEV since 2025 · listed over a year | 75 | 5.1 | 3.5% · 89th | 2025-08-25 | 2025-09-15KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.035. | |||||||
| 714 | CVE-2018-0175Cisco — Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.0 | 3.5% · 89th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.035. | |||||||
| 715 | CVE-2021-35247SolarWinds — SolarWinds Serv-U Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 5.3 | 3.5% · 89th | 2022-01-21 | 2022-02-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.035. | |||||||
| 716 | CVE-2025-8876N-able — N-able N-Central Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.4 | 3.4% · 88.9th | 2025-08-13 | 2025-08-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 717 | CVE-2026-31431Linux — Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.8 | 3.4% · 88.9th | 2026-05-01 | 2026-05-15CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 718 | CVE-2025-66644Array Networks — Array Networks ArrayOS AG OS Command Injection VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 9.8 | 3.4% · 88.8th | 2025-12-08 | 2025-12-29CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 719 | CVE-2024-53104Linux — Linux Kernel Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 3.4% · 88.8th | 2025-02-05 | 2025-02-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 720 | CVE-2025-42599Qualitia — Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 3.4% · 88.6th | 2025-04-28 | 2025-05-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 721 | CVE-2018-0167Cisco — Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 3.4% · 88.6th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 722 | CVE-2020-3569Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.6 | 3.3% · 88.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.033. | |||||||
| 723 | CVE-2009-2055Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 5.9 | 3.3% · 88.5th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.033. | |||||||
| 724 | CVE-2022-40139Trend Micro — Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 3.3% · 88.4th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.033. | |||||||
| 725 | CVE-2022-32894Apple — Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.3% · 88.4th | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.033. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple Multiple Products WebKit Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 701 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.7% 89.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
EVRS 75 Urgent
Rank 702 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.6 NVD
- EPSS
- 3.7% 89.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 703 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.7% 89.7th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
SolarWinds — SolarWinds Virtualization Manager Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 704 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.7% 89.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Apple — Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
EVRS 75 Urgent
Rank 705 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 3.7% 89.6th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 706 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.0 NVD
- EPSS
- 3.7% 89.6th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Accellion — Accellion FTA OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 707 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.7% 89.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
Siemens — Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 708 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Siemens
- Source
- CISA KEV
Strapi — Strapi Cleartext Storage of Sensitive Information Vulnerability
EVRS 75 Urgent
Rank 709 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 4.9 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 11 days
- Ransomware use
- Not known
- Vendor
- Strapi
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Unspecified Vulnerability
EVRS 75 Urgent
Rank 710 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
ConnectWise — ConnectWise ScreenConnect Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 711 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.2 NVD
- EPSS
- 3.5% 89.2nd percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ConnectWise
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 712 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.5% 89.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Citrix — Citrix Session Recording Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 713 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.1 NVD
- EPSS
- 3.5% 89th percentile
- In CISA KEV since
- 2025-08-25
- CISA deadline
- 2025-09-15 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Cisco — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 714 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.0 NVD
- EPSS
- 3.5% 89th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 715 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.3 NVD
- EPSS
- 3.5% 89th percentile
- In CISA KEV since
- 2022-01-21
- CISA deadline
- 2022-02-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
N-able — N-able N-Central Command Injection Vulnerability
EVRS 75 Urgent
Rank 716 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.4 NVD
- EPSS
- 3.4% 88.9th percentile
- In CISA KEV since
- 2025-08-13
- CISA deadline
- 2025-08-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
Linux — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
EVRS 75 Urgent
Rank 717 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.4% 88.9th percentile
- In CISA KEV since
- 2026-05-01
- CISA deadline
- 2026-05-15 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Array Networks — Array Networks ArrayOS AG OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 718 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 3.4% 88.8th percentile
- In CISA KEV since
- 2025-12-08
- CISA deadline
- 2025-12-29 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Array Networks
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 719 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.4% 88.8th percentile
- In CISA KEV since
- 2025-02-05
- CISA deadline
- 2025-02-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Qualitia — Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 720 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 3.4% 88.6th percentile
- In CISA KEV since
- 2025-04-28
- CISA deadline
- 2025-05-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualitia
- Source
- CISA KEV
Cisco — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 721 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.4% 88.6th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
EVRS 75 Urgent
Rank 722 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.6 NVD
- EPSS
- 3.3% 88.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 723 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.9 NVD
- EPSS
- 3.3% 88.5th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
EVRS 75 Urgent
Rank 724 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.2 NVD
- EPSS
- 3.3% 88.4th percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Apple — Apple iOS and macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 725 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.3% 88.4th percentile
- In CISA KEV since
- 2022-08-18
- CISA deadline
- 2022-09-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
