Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 876 | CVE-2021-39793Google — Google Pixel Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 0.7% · 52nd | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 877 | CVE-2024-29748Android — Android Pixel Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 0.7% · 51.6th | 2024-04-04 | 2024-04-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 878 | CVE-2023-33063Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.7% · 51.4th | 2023-12-05 | 2023-12-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 879 | CVE-2024-43047Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 0.7% · 51.3rd | 2024-10-08 | 2024-10-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 880 | CVE-2026-66384JFrog — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityCISA federal deadline · Overdue by 42 days | 75 | 5.3 | 0.7% · 51.1st | 2026-08-27 | 2026-09-10CISA federal deadline · Overdue by 42 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 881 | CVE-2026-7473Arista — Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 6.9 | 0.6% · 50.4th | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 882 | CVE-2021-25487Samsung — Samsung Mobile Devices Out-of-Bounds Read VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.6% · 49.7th | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 883 | CVE-2025-48543Android — Android Runtime Use-After-Free VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 0.6% · 49.7th | 2025-09-04 | 2025-09-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 884 | CVE-2026-88779Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 15 days | 75 | 8.7 | 0.6% · 47.5th | 2026-10-04 | 2026-10-07CISA federal deadline · Overdue by 15 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 885 | CVE-2026-58704Google — Google Pixel Improper Authorization VulnerabilityCISA federal deadline · Overdue by 33 days | 75 | 8.8 | 0.6% · 47.5th | 2026-09-16 | 2026-09-19CISA federal deadline · Overdue by 33 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 886 | CVE-2026-5430WSO2 — WSO2 Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 25 days | 75 | 10.0 | 0.6% · 47.4th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 887 | CVE-2025-48928TeleMessage — TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere VulnerabilityKEV since 2025 · listed over a year | 75 | 4.0 | 0.6% · 45.4th | 2025-07-01 | 2025-07-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 888 | CVE-2026-102490Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management VulnerabilityCISA federal deadline · Overdue by 17 days | 75 | 9.4 | 0.5% · 45.2nd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 17 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 889 | CVE-2026-34926Trend Micro — Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 6.7 | 0.5% · 44.4th | 2026-05-21 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 890 | CVE-2021-25489Samsung — Samsung Mobile Devices Improper Input Validation VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 0.5% · 44th | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 891 | CVE-2021-1906Qualcomm — Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 0.5% · 43.3rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 892 | CVE-2022-48618Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.0 | 0.5% · 40.9th | 2024-01-31 | 2024-02-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 893 | CVE-2024-29745Android — Android Pixel Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 75 | 5.5 | 0.5% · 40.9th | 2024-04-04 | 2024-04-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 894 | CVE-2025-21480Qualcomm — Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 0.5% · 38.8th | 2025-06-03 | 2025-06-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 895 | CVE-2025-47729TeleMessage — TeleMessage TM SGNL Hidden Functionality VulnerabilityKEV since 2025 · listed over a year | 75 | 4.9 | 0.4% · 37.8th | 2025-05-12 | 2025-06-02KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 896 | CVE-2026-96654Plex — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityCISA federal deadline in 1 day | 75 | 6.9 | 0.4% · 36.4th | 2026-10-20 | 2026-10-23CISA federal deadline in 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 897 | CVE-2025-43520Apple — Apple Multiple Products Classic Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 5.5 | 0.4% · 35.7th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 898 | CVE-2026-96652Plex — Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline in 12 days | 75 | 5.3 | 0.4% · 35.5th | 2026-10-20 | 2026-11-03CISA federal deadline in 12 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 899 | CVE-2026-96655Plex — Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline in 12 days | 75 | 5.3 | 0.4% · 35.5th | 2026-10-20 | 2026-11-03CISA federal deadline in 12 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 900 | CVE-2022-22071Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 0.4% · 34.1st | 2023-12-05 | 2023-12-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsGoogle — Google Pixel Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 876 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 52nd percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Android — Android Pixel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 877 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 51.6th percentile
- In CISA KEV since
- 2024-04-04
- CISA deadline
- 2024-04-25 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 878 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 51.4th percentile
- In CISA KEV since
- 2023-12-05
- CISA deadline
- 2023-12-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 879 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 51.3rd percentile
- In CISA KEV since
- 2024-10-08
- CISA deadline
- 2024-10-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
EVRS 75 Urgent
Rank 880 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.7% 51.1st percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-09-10 CISA federal deadline · Overdue by 42 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Arista — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
EVRS 75 Urgent
Rank 881 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.9 NVD
- EPSS
- 0.6% 50.4th percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 882 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.6% 49.7th percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Android — Android Runtime Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 883 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.6% 49.7th percentile
- In CISA KEV since
- 2025-09-04
- CISA deadline
- 2025-09-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 884 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.7 NVD
- EPSS
- 0.6% 47.5th percentile
- In CISA KEV since
- 2026-10-04
- CISA deadline
- 2026-10-07 CISA federal deadline · Overdue by 15 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Google — Google Pixel Improper Authorization Vulnerability
EVRS 75 Urgent
Rank 885 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.6% 47.5th percentile
- In CISA KEV since
- 2026-09-16
- CISA deadline
- 2026-09-19 CISA federal deadline · Overdue by 33 days
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
WSO2 — WSO2 Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 886 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 0.6% 47.4th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- WSO2
- Source
- CISA KEV
TeleMessage — TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
EVRS 75 Urgent
Rank 887 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 4.0 NVD
- EPSS
- 0.6% 45.4th percentile
- In CISA KEV since
- 2025-07-01
- CISA deadline
- 2025-07-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TeleMessage
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 888 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.4 NVD
- EPSS
- 0.5% 45.2nd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 17 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 889 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.7 NVD
- EPSS
- 0.5% 44.4th percentile
- In CISA KEV since
- 2026-05-21
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 890 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.5% 44th percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
EVRS 75 Urgent
Rank 891 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.5% 43.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 892 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.0 NVD
- EPSS
- 0.5% 40.9th percentile
- In CISA KEV since
- 2024-01-31
- CISA deadline
- 2024-02-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Android — Android Pixel Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 893 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.5% 40.9th percentile
- In CISA KEV since
- 2024-04-04
- CISA deadline
- 2024-04-25 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 894 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.6 NVD
- EPSS
- 0.5% 38.8th percentile
- In CISA KEV since
- 2025-06-03
- CISA deadline
- 2025-06-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
TeleMessage — TeleMessage TM SGNL Hidden Functionality Vulnerability
EVRS 75 Urgent
Rank 895 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 4.9 NVD
- EPSS
- 0.4% 37.8th percentile
- In CISA KEV since
- 2025-05-12
- CISA deadline
- 2025-06-02 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TeleMessage
- Source
- CISA KEV
Plex — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
EVRS 75 Urgent
Rank 896 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.9 NVD
- EPSS
- 0.4% 36.4th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline in 1 day
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Apple — Apple Multiple Products Classic Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 897 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.4% 35.7th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Plex — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 898 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.4% 35.5th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-11-03 CISA federal deadline in 12 days
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Plex — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 899 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.4% 35.5th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-11-03 CISA federal deadline in 12 days
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 900 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.4% 34.1st percentile
- In CISA KEV since
- 2023-12-05
- CISA deadline
- 2023-12-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
