Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 801 | CVE-2026-76519Cisco — Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 9.8 | 1.6% · 75.2nd | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 802 | CVE-2025-22224VMware — VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityKEV since 2025 · listed over a year | 75 | 8.2 | 1.6% · 75th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 803 | CVE-2026-67277MikroTik — MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 39 days | 75 | 8.8 | 1.6% · 75th | 2026-09-10 | 2026-09-13CISA federal deadline · Overdue by 39 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 804 | CVE-2019-8720WebKitGTK — WebKitGTK Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 1.6% · 74.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 805 | CVE-2021-1905Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.5% · 74.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 806 | CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass Vulnerabilitywrite-up | 75 | 8.8 | 1.5% · 74.2nd | — | — | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. Our write-up A command injection flaw in Windows Shell lets attackers bypass Mark of the Web protections using a crafted file sent by email or instant message, and it is being exploited in the wild. Affected: Windows 10, Windows 11 and Windows Server 2012 R2 through 2025. Fix: Install the October cumulative update and reboot. Updated Oct 14, 2026. Changed: Reformatted into summary, affected systems and fix. AI-written summary, Oct 14, 2026 Confirm details in the vendor advisory before acting. Source: CISA KEV | |||||||
| 807 | CVE-2013-2597Code Aurora — Code Aurora ACDB Audio Driver Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.4 | 1.5% · 74.1st | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 808 | CVE-2021-36742Trend Micro — Trend Micro Multiple Products Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.5% · 73.7th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 809 | CVE-2024-23225Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.5% · 73.7th | 2024-03-06 | 2024-03-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 810 | CVE-2023-20963Android — Android Framework Privilege Escalation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 1.5% · 73.4th | 2023-04-13 | 2023-05-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 811 | CVE-2026-72529TrueConf — TrueConf Server Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 9.3 | 1.5% · 73.4th | 2026-08-20 | 2026-08-23CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 812 | CVE-2024-23296Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.4% · 72.4th | 2024-03-06 | 2024-03-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 813 | CVE-2026-20700Apple — Apple Multiple Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 1.4% · 72.1st | 2026-02-12 | 2026-03-05CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 814 | CVE-2023-41990Apple — Apple Multiple Products Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.4% · 72nd | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 815 | CVE-2020-0069MediaTek — Mediatek Multiple Chipsets Insufficient Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.4% · 71.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 816 | CVE-2026-106931EG Secure Solutions — EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA federal deadline in 1 day | 75 | 8.5 | 1.4% · 71.6th | 2026-10-20 | 2026-10-23CISA federal deadline in 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 817 | CVE-2025-39964Linux — Linux Kernel Race Condition VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 5.5 | 1.4% · 71.5th | 2026-09-18 | 2026-09-21CISA federal deadline · Overdue by 31 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 818 | CVE-2024-53150Linux — Linux Kernel Out-of-Bounds Read VulnerabilityKEV since 2025 · listed over a year | 75 | 7.1 | 1.4% · 71.3rd | 2025-04-09 | 2025-04-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 819 | CVE-2025-35939Craft CMS — Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityKEV since 2025 · listed over a year | 75 | 6.9 | 1.3% · 71.2nd | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 820 | CVE-2025-38352Linux — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 1.3% · 71.1st | 2025-09-04 | 2025-09-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 821 | CVE-2026-88772Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 22 days | 75 | 9.5 | 1.3% · 70.2nd | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 22 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 822 | CVE-2023-4346KNX Association — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 7.5 | 1.3% · 70.1st | 2026-07-15 | 2026-07-29CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 823 | CVE-2026-21385Qualcomm — Qualcomm Multiple Chipsets Memory Corruption VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 1.3% · 70th | 2026-03-03 | 2026-03-24CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 824 | CVE-2026-102489Zammad GmbH — Zammad GmbH Zammad Session Fixation VulnerabilityCISA federal deadline · Overdue by 17 days | 75 | 9.4 | 1.3% · 69.2nd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 17 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 825 | CVE-2026-86950Apple — Apple Multiple Products Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 9 days | 75 | 8.8 | 1.2% · 68.9th | 2026-09-29 | 2026-10-13CISA federal deadline · Overdue by 9 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
EVRS 75 Urgent
Rank 801 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 Cisco
- EPSS
- 1.6% 75.2nd percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
VMware — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
EVRS 75 Urgent
Rank 802 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 1.6% 75th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 803 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.6% 75th percentile
- In CISA KEV since
- 2026-09-10
- CISA deadline
- 2026-09-13 CISA federal deadline · Overdue by 39 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
WebKitGTK — WebKitGTK Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 804 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.6% 74.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- WebKitGTK
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 805 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 74.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Microsoft — Windows Shell Security Feature Bypass Vulnerability
EVRS 75 Urgent
Rank 806 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8
- EPSS
- 1.5% 74.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Code Aurora — Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 807 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 1.5% 74.1st percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Code Aurora
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 808 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 809 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.7th percentile
- In CISA KEV since
- 2024-03-06
- CISA deadline
- 2024-03-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 810 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.4th percentile
- In CISA KEV since
- 2023-04-13
- CISA deadline
- 2023-05-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
TrueConf — TrueConf Server Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 811 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.5% 73.4th percentile
- In CISA KEV since
- 2026-08-20
- CISA deadline
- 2026-08-23 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- TrueConf
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 812 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72.4th percentile
- In CISA KEV since
- 2024-03-06
- CISA deadline
- 2024-03-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 813 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72.1st percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-03-05 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 814 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72nd percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
MediaTek — Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
EVRS 75 Urgent
Rank 815 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 71.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MediaTek
- Source
- CISA KEV
EG Secure Solutions — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 816 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.5 NVD
- EPSS
- 1.4% 71.6th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline in 1 day
- Ransomware use
- Not known
- Vendor
- EG Secure Solutions
- Source
- CISA KEV
Linux — Linux Kernel Race Condition Vulnerability
EVRS 75 Urgent
Rank 817 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 1.4% 71.5th percentile
- In CISA KEV since
- 2026-09-18
- CISA deadline
- 2026-09-21 CISA federal deadline · Overdue by 31 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 818 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.1 NVD
- EPSS
- 1.4% 71.3rd percentile
- In CISA KEV since
- 2025-04-09
- CISA deadline
- 2025-04-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Craft CMS — Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
EVRS 75 Urgent
Rank 819 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.9 NVD
- EPSS
- 1.3% 71.2nd percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Craft CMS
- Source
- CISA KEV
Linux — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
EVRS 75 Urgent
Rank 820 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.3% 71.1st percentile
- In CISA KEV since
- 2025-09-04
- CISA deadline
- 2025-09-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 821 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.3% 70.2nd percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 22 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
KNX Association — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
EVRS 75 Urgent
Rank 822 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.3% 70.1st percentile
- In CISA KEV since
- 2026-07-15
- CISA deadline
- 2026-07-29 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- KNX Association
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 823 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.3% 70th percentile
- In CISA KEV since
- 2026-03-03
- CISA deadline
- 2026-03-24 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Session Fixation Vulnerability
EVRS 75 Urgent
Rank 824 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.3% 69.2nd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 17 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Apple — Apple Multiple Products Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 825 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.2% 68.9th percentile
- In CISA KEV since
- 2026-09-29
- CISA deadline
- 2026-10-13 CISA federal deadline · Overdue by 9 days
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
