Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 851 | CVE-2026-8398Daemon — Daemon Tools Lite Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 1.0% · 61.2nd | 2026-05-27 | 2026-05-30CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 852 | CVE-2026-84869ConnectWise — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityCISA federal deadline · Overdue by 38 days | 75 | 9.9 | 0.9% · 60th | 2026-09-11 | 2026-09-14CISA federal deadline · Overdue by 38 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 853 | CVE-2021-25370Samsung — Samsung Mobile Devices Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 4.4 | 0.9% · 58.9th | 2022-11-08 | 2022-11-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 854 | CVE-2026-55255Langflow — Langflow Authorization Bypass Through User-Controlled Key VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.4 | 0.9% · 58.8th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 855 | CVE-2021-0920Android — Android Kernel Race Condition VulnerabilityKEV since 2022 · listed over a year | 75 | 6.4 | 0.9% · 58.3rd | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 856 | CVE-2021-44168Fortinet — Fortinet FortiOS Arbitrary File DownloadKEV since 2021 · listed over a year | 75 | 7.8 | 0.9% · 58.2nd | 2021-12-10 | 2021-12-24KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 857 | CVE-2026-105133Ahsay — Ahsay AhsayCBS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 5.5 | 0.9% · 57.9th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 858 | CVE-2025-21479Qualcomm — Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 0.8% · 57.5th | 2025-06-03 | 2025-06-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 859 | CVE-2026-59822BerriAI — BerriAI LiteLLM Improper Authentication VulnerabilityCISA federal deadline · Overdue by 36 days | 75 | 8.8 | 0.8% · 57.2nd | 2026-09-02 | 2026-09-16CISA federal deadline · Overdue by 36 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 860 | CVE-2020-9859Apple — Apple Multiple Products Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 0.8% · 57th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 861 | CVE-2026-53266Linux — Linux Kernel Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 8.8 | 0.8% · 57th | 2026-09-18 | 2026-09-21CISA federal deadline · Overdue by 31 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 862 | CVE-2026-46817Oracle — Oracle E-Business Suite Improper Privilege Management VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 0.8% · 56.5th | 2026-07-15 | 2026-07-18CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 863 | CVE-2024-50302Linux — Linux Kernel Use of Uninitialized Resource VulnerabilityKEV since 2025 · listed over a year | 75 | 5.5 | 0.8% · 56.4th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 864 | CVE-2026-54420LiteSpeed — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 8.5 | 0.8% · 56.3rd | 2026-06-15 | 2026-06-18CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 865 | CVE-2021-25372Samsung — Samsung Mobile Devices Improper Boundary Check VulnerabilityKEV since 2023 · listed over a year | 75 | 6.7 | 0.8% · 56.2nd | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 866 | CVE-2021-25371Samsung — Samsung Mobile Devices Unspecified VulnerabilityKEV since 2023 · listed over a year | 75 | 6.7 | 0.8% · 56.1st | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 867 | CVE-2023-33106Qualcomm — Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.8% · 55.7th | 2023-12-05 | 2023-12-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 868 | CVE-2024-4610Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 0.8% · 54.9th | 2024-06-12 | 2024-07-03KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 869 | CVE-2026-96656Plex — Plex Media Server External Control of File Name or Path VulnerabilityCISA federal deadline in 1 day | 75 | 8.6 | 0.8% · 54.7th | 2026-10-20 | 2026-10-23CISA federal deadline in 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 870 | CVE-2023-33107Qualcomm — Qualcomm Multiple Chipsets Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.7% · 54th | 2023-12-05 | 2023-12-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 871 | CVE-2024-43093Android — Android Framework Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 7.3 | 0.7% · 52.9th | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 872 | CVE-2026-53362Linux — Linux Kernel Unspecified VulnerabilityCISA federal deadline · Overdue by 53 days | 75 | 7.8 | 0.7% · 52.9th | 2026-08-27 | 2026-08-30CISA federal deadline · Overdue by 53 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 873 | CVE-2026-5281Google — Google Dawn Use-After-Free VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.8 | 0.7% · 52.7th | 2026-04-01 | 2026-04-15CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 874 | CVE-2019-8526Apple — Apple macOS Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.7% · 52.6th | 2023-04-17 | 2023-05-08KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 875 | CVE-2025-1976Broadcom — Broadcom Brocade Fabric OS Code Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 0.7% · 52.2nd | 2025-04-28 | 2025-05-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsDaemon — Daemon Tools Lite Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 851 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.0% 61.2nd percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-05-30 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Daemon
- Source
- CISA KEV
ConnectWise — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
EVRS 75 Urgent
Rank 852 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.9 NVD
- EPSS
- 0.9% 60th percentile
- In CISA KEV since
- 2026-09-11
- CISA deadline
- 2026-09-14 CISA federal deadline · Overdue by 38 days
- Ransomware use
- Not known
- Vendor
- ConnectWise
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 853 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.4 NVD
- EPSS
- 0.9% 58.9th percentile
- In CISA KEV since
- 2022-11-08
- CISA deadline
- 2022-11-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability
EVRS 75 Urgent
Rank 854 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 0.9% 58.8th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Android — Android Kernel Race Condition Vulnerability
EVRS 75 Urgent
Rank 855 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.4 NVD
- EPSS
- 0.9% 58.3rd percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Arbitrary File Download
EVRS 75 Urgent
Rank 856 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.9% 58.2nd percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2021-12-24 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 857 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.9% 57.9th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 858 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 0.8% 57.5th percentile
- In CISA KEV since
- 2025-06-03
- CISA deadline
- 2025-06-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
BerriAI — BerriAI LiteLLM Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 859 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.8% 57.2nd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-16 CISA federal deadline · Overdue by 36 days
- Ransomware use
- Not known
- Vendor
- BerriAI
- Source
- CISA KEV
Apple — Apple Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 860 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.8% 57th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 861 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.8% 57th percentile
- In CISA KEV since
- 2026-09-18
- CISA deadline
- 2026-09-21 CISA federal deadline · Overdue by 31 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Oracle — Oracle E-Business Suite Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 862 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 0.8% 56.5th percentile
- In CISA KEV since
- 2026-07-15
- CISA deadline
- 2026-07-18 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Linux — Linux Kernel Use of Uninitialized Resource Vulnerability
EVRS 75 Urgent
Rank 863 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.8% 56.4th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
LiteSpeed — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
EVRS 75 Urgent
Rank 864 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.5 NVD
- EPSS
- 0.8% 56.3rd percentile
- In CISA KEV since
- 2026-06-15
- CISA deadline
- 2026-06-18 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- LiteSpeed
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Improper Boundary Check Vulnerability
EVRS 75 Urgent
Rank 865 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.7 NVD
- EPSS
- 0.8% 56.2nd percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Unspecified Vulnerability
EVRS 75 Urgent
Rank 866 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.7 NVD
- EPSS
- 0.8% 56.1st percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
EVRS 75 Urgent
Rank 867 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.8% 55.7th percentile
- In CISA KEV since
- 2023-12-05
- CISA deadline
- 2023-12-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Arm — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 868 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.8% 54.9th percentile
- In CISA KEV since
- 2024-06-12
- CISA deadline
- 2024-07-03 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Plex — Plex Media Server External Control of File Name or Path Vulnerability
EVRS 75 Urgent
Rank 869 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 0.8% 54.7th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline in 1 day
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 870 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 54th percentile
- In CISA KEV since
- 2023-12-05
- CISA deadline
- 2023-12-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 871 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.3 NVD
- EPSS
- 0.7% 52.9th percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Linux — Linux Kernel Unspecified Vulnerability
EVRS 75 Urgent
Rank 872 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 52.9th percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-08-30 CISA federal deadline · Overdue by 53 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Google — Google Dawn Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 873 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.7% 52.7th percentile
- In CISA KEV since
- 2026-04-01
- CISA deadline
- 2026-04-15 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple macOS Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 874 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 52.6th percentile
- In CISA KEV since
- 2023-04-17
- CISA deadline
- 2023-05-08 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Broadcom — Broadcom Brocade Fabric OS Code Injection Vulnerability
EVRS 75 Urgent
Rank 875 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 0.7% 52.2nd percentile
- In CISA KEV since
- 2025-04-28
- CISA deadline
- 2025-05-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
