Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Ranked by EVRS

910 match · filtered from 2,960

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 76 to 100
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
76 CVE-2026-73570Synacor — Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityCISA federal deadline · Overdue by 59 days 83 8.9 71.7% · 99.42nd 2026-08-21 2026-08-24CISA federal deadline · Overdue by 59 days
77 CVE-2020-3259Cisco — Cisco ASA and FTD Information Disclosure VulnerabilityRansomwareKEV since 2024 · listed over a year 83 7.5 71.5% · 99.42nd 2024-02-15 2024-03-07KEV since 2024 · listed over a year
78 CVE-2021-26086Atlassian — Atlassian Jira Server and Data Center Path Traversal VulnerabilityKEV since 2024 · listed over a year 82 5.3 100.0% · 99.99th 2024-11-12 2024-12-03KEV since 2024 · listed over a year
79 CVE-2020-5849Unraid — Unraid Authentication Bypass VulnerabilityKEV since 2021 · listed over a year 82 7.5 93.2% · 99.84th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
80 CVE-2023-20273Cisco — Cisco IOS XE Web UI Command Injection VulnerabilityKEV since 2023 · listed over a year 82 7.2 93.0% · 99.83rd 2023-10-23 2023-10-27KEV since 2023 · listed over a year
81 CVE-2022-0847Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year 82 7.8 92.8% · 99.83rd 2022-04-25 2022-05-16KEV since 2022 · listed over a year
82 CVE-2019-2616Oracle — Oracle BI Publisher Unauthorized Access VulnerabilityKEV since 2022 · listed over a year 82 7.2 92.2% · 99.82nd 2022-03-25 2022-04-15KEV since 2022 · listed over a year
83 CVE-2012-0754Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year 82 8.1 91.1% · 99.81st 2022-06-08 2022-06-22KEV since 2022 · listed over a year
84 CVE-2021-21315Npm package — System Information Library for Node.JS Command InjectionKEV since 2022 · listed over a year 82 7.8 90.7% · 99.81st 2022-01-18 2022-02-01KEV since 2022 · listed over a year
85 CVE-2024-13161Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year 82 7.5 89.8% · 99.79th 2025-03-10 2025-03-31KEV since 2025 · listed over a year
86 CVE-2017-5521NETGEAR — NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityKEV since 2022 · listed over a year 82 8.1 89.4% · 99.78th 2022-09-08 2022-09-29KEV since 2022 · listed over a year
87 CVE-2014-3120Elastic — Elasticsearch Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 82 8.1 88.6% · 99.78th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
88 CVE-2021-43798Grafana Labs — Grafana Path Traversal VulnerabilityKEV since 2025 · listed over a year 82 7.5 88.5% · 99.78th 2025-10-09 2025-10-30KEV since 2025 · listed over a year
89 CVE-2016-6366Cisco — Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityKEV since 2022 · listed over a year 82 8.8 87.6% · 99.76th 2022-05-24 2022-06-14KEV since 2022 · listed over a year
90 CVE-2021-21017Adobe — Adobe Acrobat and Reader Heap-based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year 82 8.8 86.3% · 99.74th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
91 CVE-2018-17463Google — Google Chromium V8 Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 82 8.8 84.6% · 99.7th 2022-06-08 2022-06-22KEV since 2022 · listed over a year
92 CVE-2021-21224Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year 82 8.8 84.2% · 99.7th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
93 CVE-2021-27561Yealink — Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2021 · listed over a year 82 9.8 82.9% · 99.67th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
94 CVE-2015-1187D-Link and TRENDnet — D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 82 9.8 82.9% · 99.67th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
95 CVE-2023-27992Zyxel — Zyxel Multiple NAS Devices Command Injection VulnerabilityKEV since 2023 · listed over a year 82 9.8 82.8% · 99.67th 2023-06-23 2023-07-14KEV since 2023 · listed over a year
96 CVE-2020-14871Oracle — Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityKEV since 2021 · listed over a year 82 10.0 80.2% · 99.62nd 2021-11-03 2022-05-03KEV since 2021 · listed over a year
97 CVE-2020-10987Tenda — Tenda AC1900 Router AC15 Model Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 82 9.8 79.8% · 99.61st 2021-11-03 2022-05-03KEV since 2021 · listed over a year
98 CVE-2013-4810Hewlett Packard (HP) — HP Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 82 9.8 79.5% · 99.6th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
99 CVE-2025-6204Dassault Systèmes — Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityCISA federal deadline · Overdue by 11 months 82 8.0 79.2% · 99.6th 2025-10-28 2025-11-18CISA federal deadline · Overdue by 11 months
100 CVE-2025-20337Cisco — Cisco Identity Services Engine Injection VulnerabilityKEV since 2025 · listed over a year 82 10.0 74.5% · 99.5th 2025-07-28 2025-08-18KEV since 2025 · listed over a year
Showing 76–100 of 910

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics