Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 751 | CVE-2020-24557Trend Micro — Trend Micro Multiple Products Improper Access Control VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 2.7% · 85.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 752 | CVE-2023-35674Android — Android Framework Privilege Escalation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 2.6% · 85.4th | 2023-09-13 | 2023-10-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 753 | CVE-2019-6223Apple — Apple iOS and macOS Group Facetime VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 2.6% · 85.4th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 754 | CVE-2023-21492Samsung — Samsung Mobile Devices Insertion of Sensitive Information Into Log File VulnerabilityKEV since 2023 · listed over a year | 75 | 4.4 | 2.6% · 84.9th | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 755 | CVE-2022-0028Palo Alto Networks — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 2.5% · 84.9th | 2022-08-22 | 2022-09-12KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 756 | CVE-2026-6973Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.2 | 2.5% · 84.8th | 2026-05-07 | 2026-05-10CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 757 | CVE-2026-7273Zyxel — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 28 days | 75 | 8.8 | 2.5% · 84.6th | 2026-09-21 | 2026-09-24CISA federal deadline · Overdue by 28 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 758 | CVE-2025-32975Quest — Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 10.0 | 2.5% · 84.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 759 | CVE-2025-30154reviewdog — reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 2.5% · 84.5th | 2025-03-24 | 2025-04-14KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 760 | CVE-2023-20109Cisco — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 6.6 | 2.5% · 84.5th | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 761 | CVE-2025-3928Commvault — Commvault Web Server Unspecified VulnerabilityKEV since 2025 · listed over a year | 75 | 8.7 | 2.5% · 84.5th | 2025-04-28 | 2025-05-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 762 | CVE-2026-11645Google — Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 8.8 | 2.4% · 84.2nd | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 763 | CVE-2018-4344Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 2.4% · 83.7th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 764 | CVE-2022-26486Mozilla — Mozilla Firefox Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 9.6 | 2.4% · 83.7th | 2022-03-07 | 2022-03-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 765 | CVE-2026-3909Google — Google Skia Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 2.3% · 83.5th | 2026-03-13 | 2026-03-27CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 766 | CVE-2025-53521F5 — F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 2.3% · 83.1st | 2026-03-27 | 2026-03-30CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 767 | CVE-2020-9818Apple — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 2.3% · 83rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 768 | CVE-2026-94127F5 — F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 9.3 | 2.2% · 82.6th | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 769 | CVE-2021-1782Apple — Apple Multiple Products Race Condition VulnerabilityKEV since 2021 · listed over a year | 75 | 7.0 | 2.2% · 82.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 770 | CVE-2025-21043Samsung — Samsung Mobile Devices Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 2.2% · 82.5th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 771 | CVE-2026-104286Fortinet — Fortinet FortiMail Path Traversal VulnerabilityCISA federal deadline · Overdue by 18 days | 75 | 9.8 | 2.2% · 82.4th | 2026-10-01 | 2026-10-04CISA federal deadline · Overdue by 18 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 772 | CVE-2026-34621Adobe — Adobe Acrobat and Reader Prototype Pollution VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.6 | 2.2% · 82.2nd | 2026-04-13 | 2026-04-27CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 773 | CVE-2020-9819Apple — Apple iOS, iPadOS, and watchOS Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 2.2% · 82.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 774 | CVE-2017-12232Cisco — Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.2% · 82nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 775 | CVE-2017-6663Cisco — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.1% · 81.7th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsTrend Micro — Trend Micro Multiple Products Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 751 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.7% 85.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 752 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.6% 85.4th percentile
- In CISA KEV since
- 2023-09-13
- CISA deadline
- 2023-10-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Apple — Apple iOS and macOS Group Facetime Vulnerability
EVRS 75 Urgent
Rank 753 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 2.6% 85.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
EVRS 75 Urgent
Rank 754 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 4.4 NVD
- EPSS
- 2.6% 84.9th percentile
- In CISA KEV since
- 2023-05-19
- CISA deadline
- 2023-06-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 755 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.5% 84.9th percentile
- In CISA KEV since
- 2022-08-22
- CISA deadline
- 2022-09-12 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 756 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.2 NVD
- EPSS
- 2.5% 84.8th percentile
- In CISA KEV since
- 2026-05-07
- CISA deadline
- 2026-05-10 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Zyxel — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 757 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.5% 84.6th percentile
- In CISA KEV since
- 2026-09-21
- CISA deadline
- 2026-09-24 CISA federal deadline · Overdue by 28 days
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Quest — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 758 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Quest
- Source
- CISA KEV
reviewdog — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 759 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2025-03-24
- CISA deadline
- 2025-04-14 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- reviewdog
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 760 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.6 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2023-10-10
- CISA deadline
- 2023-10-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Commvault — Commvault Web Server Unspecified Vulnerability
EVRS 75 Urgent
Rank 761 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.7 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2025-04-28
- CISA deadline
- 2025-05-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Commvault
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
EVRS 75 Urgent
Rank 762 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.4% 84.2nd percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 763 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.4% 83.7th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Mozilla — Mozilla Firefox Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 764 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.6 NVD
- EPSS
- 2.4% 83.7th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-03-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Google — Google Skia Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 765 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.3% 83.5th percentile
- In CISA KEV since
- 2026-03-13
- CISA deadline
- 2026-03-27 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
F5 — F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 766 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.3% 83.1st percentile
- In CISA KEV since
- 2026-03-27
- CISA deadline
- 2026-03-30 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 767 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.3% 83rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
F5 — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 768 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.2% 82.6th percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
Apple — Apple Multiple Products Race Condition Vulnerability
EVRS 75 Urgent
Rank 769 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.0 NVD
- EPSS
- 2.2% 82.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 770 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.2% 82.5th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Fortinet — Fortinet FortiMail Path Traversal Vulnerability
EVRS 75 Urgent
Rank 771 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.2% 82.4th percentile
- In CISA KEV since
- 2026-10-01
- CISA deadline
- 2026-10-04 CISA federal deadline · Overdue by 18 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Prototype Pollution Vulnerability
EVRS 75 Urgent
Rank 772 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.2% 82.2nd percentile
- In CISA KEV since
- 2026-04-13
- CISA deadline
- 2026-04-27 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 773 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 4.3 NVD
- EPSS
- 2.2% 82.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 774 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.2% 82nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 775 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.1% 81.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
