Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 826 | CVE-2023-26083Arm — Arm Mali GPU Kernel Driver Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 75 | 3.3 | 1.2% · 68.4th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 827 | CVE-2026-0322Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 8.6 | 1.2% · 68.3rd | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 828 | CVE-2025-59374ASUS — ASUS Live Update Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 9 months | 75 | 9.3 | 1.2% · 67.8th | 2025-12-17 | 2026-01-07CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 829 | CVE-2025-43200Apple — Apple Multiple Products Unspecified VulnerabilityKEV since 2025 · listed over a year | 75 | 4.2 | 1.2% · 67.7th | 2025-06-16 | 2025-07-07KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 830 | CVE-2026-102764BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 3 days | 75 | 9.3 | 1.2% · 67.4th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 3 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 831 | CVE-2023-36851Juniper — Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year | 75 | 5.3 | 1.1% · 65.9th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 832 | CVE-2023-4211Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 1.1% · 65.3rd | 2023-10-03 | 2023-10-24KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 833 | CVE-2022-22674Apple — Apple macOS Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 5.5 | 1.1% · 65th | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 834 | CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 22 days | 75 | 9.5 | 1.1% · 64.9th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 22 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 835 | CVE-2025-61624Fortinet — Fortinet Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 3 days | 75 | 6.5 | 1.1% · 64.8th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 3 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 836 | CVE-2021-25369Samsung — Samsung Mobile Devices Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 75 | 5.5 | 1.1% · 64.7th | 2022-11-08 | 2022-11-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 837 | CVE-2022-42827Apple — Apple iOS and iPadOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 1.1% · 64.4th | 2022-10-25 | 2022-11-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 838 | CVE-2026-3910Google — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 1.1% · 64.4th | 2026-03-13 | 2026-03-27CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 839 | CVE-2022-22706Arm — Arm Mali GPU Kernel Driver Unspecified VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 1.1% · 64.3rd | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 840 | CVE-2026-93952Arista — Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 9.5 | 1.1% · 64.3rd | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 841 | CVE-2021-1048Android — Android Kernel Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 1.1% · 64.1st | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 842 | CVE-2026-67279MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 6.9 | 1.0% · 63.3rd | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 24 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 843 | CVE-2021-23874McAfee — McAfee Total Protection (MTP) Improper Privilege Management VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.0% · 63.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 844 | CVE-2025-22225VMware — VMware ESXi Arbitrary Write VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 8.2 | 1.0% · 62.9th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 845 | CVE-2025-27038Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2025 · listed over a year | 75 | 7.5 | 1.0% · 62.9th | 2025-06-03 | 2025-06-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 846 | CVE-2026-48172LiteSpeed — LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 10.0 | 1.0% · 62.8th | 2026-05-26 | 2026-05-29CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 847 | CVE-2026-8452Citrix — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 54 days | 75 | 8.8 | 1.0% · 62.8th | 2026-08-26 | 2026-08-29CISA federal deadline · Overdue by 54 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 848 | CVE-2026-20349Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 8.6 | 1.0% · 62.8th | 2026-08-11 | 2026-08-14CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 849 | CVE-2026-16812Arista — Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 1.0% · 62.4th | 2026-07-27 | 2026-07-30CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 850 | CVE-2023-42824Apple — Apple iOS and iPadOS Kernel Privilege Escalation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 1.0% · 61.5th | 2023-10-05 | 2023-10-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsArm — Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 826 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 3.3 NVD
- EPSS
- 1.2% 68.4th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection Vulnerability
EVRS 75 Urgent
Rank 827 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 1.2% 68.3rd percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
ASUS — ASUS Live Update Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 828 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.2% 67.8th percentile
- In CISA KEV since
- 2025-12-17
- CISA deadline
- 2026-01-07 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- ASUS
- Source
- CISA KEV
Apple — Apple Multiple Products Unspecified Vulnerability
EVRS 75 Urgent
Rank 829 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.2 NVD
- EPSS
- 1.2% 67.7th percentile
- In CISA KEV since
- 2025-06-16
- CISA deadline
- 2025-07-07 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 830 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.2% 67.4th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 3 days
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
Juniper — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 831 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 1.1% 65.9th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
Arm — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 832 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 1.1% 65.3rd percentile
- In CISA KEV since
- 2023-10-03
- CISA deadline
- 2023-10-24 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Apple — Apple macOS Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 833 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 1.1% 65th percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 834 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.1% 64.9th percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 22 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 835 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 1.1% 64.8th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 3 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 836 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 1.1% 64.7th percentile
- In CISA KEV since
- 2022-11-08
- CISA deadline
- 2022-11-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 837 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.1% 64.4th percentile
- In CISA KEV since
- 2022-10-25
- CISA deadline
- 2022-11-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 838 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.1% 64.4th percentile
- In CISA KEV since
- 2026-03-13
- CISA deadline
- 2026-03-27 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Arm — Arm Mali GPU Kernel Driver Unspecified Vulnerability
EVRS 75 Urgent
Rank 839 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.1% 64.3rd percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 840 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.1% 64.3rd percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Android — Android Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 841 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.1% 64.1st percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
EVRS 75 Urgent
Rank 842 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.9 NVD
- EPSS
- 1.0% 63.3rd percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 24 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
McAfee — McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 843 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.0% 63.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- McAfee
- Source
- CISA KEV
VMware — VMware ESXi Arbitrary Write Vulnerability
EVRS 75 Urgent
Rank 844 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 1.0% 62.9th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 845 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.0% 62.9th percentile
- In CISA KEV since
- 2025-06-03
- CISA deadline
- 2025-06-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
LiteSpeed — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 846 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-05-26
- CISA deadline
- 2026-05-29 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- LiteSpeed
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 847 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-08-29 CISA federal deadline · Overdue by 54 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
EVRS 75 Urgent
Rank 848 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-08-11
- CISA deadline
- 2026-08-14 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 849 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.0% 62.4th percentile
- In CISA KEV since
- 2026-07-27
- CISA deadline
- 2026-07-30 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 850 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.0% 61.5th percentile
- In CISA KEV since
- 2023-10-05
- CISA deadline
- 2023-10-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
