Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 726 | CVE-2020-8196Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 26.3% · 98th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.263. | |||||||
| 727 | CVE-2021-22506Micro Focus — Micro Focus Access Manager Information Leakage VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 25.7% · 98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.257. | |||||||
| 728 | CVE-2015-2590Oracle — Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 25.5% · 98th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.255. | |||||||
| 729 | CVE-2016-7855Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 25.2% · 97.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.252. | |||||||
| 730 | CVE-2022-0185Linux — Linux Kernel Heap-Based Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 75 | 8.4 | 25.2% · 97.9th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.252. | |||||||
| 731 | CVE-2019-18187Trend Micro — Trend Micro OfficeScan Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 25.1% · 97.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.251. | |||||||
| 732 | CVE-2018-5002Adobe — Adobe Flash Player Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 25.1% · 97.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.251. | |||||||
| 733 | CVE-2022-3038Google — Google Chromium Network Service Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.9% · 97.9th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.249. | |||||||
| 734 | CVE-2014-0502Adobe — Adobe Flash Player Double Free VulnerablityKEV since 2024 · listed over a year | 75 | 8.8 | 24.8% · 97.9th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.248. | |||||||
| 735 | CVE-2022-1096Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 24.7% · 97.9th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.247. | |||||||
| 736 | CVE-2024-27443Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 24.6% · 97.9th | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.246. | |||||||
| 737 | CVE-2023-41993Apple — Apple Multiple Products WebKit Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.3% · 97.9th | 2023-09-25 | 2023-10-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.243. | |||||||
| 738 | CVE-2016-9563SAP — SAP NetWeaver XML External Entity (XXE) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 24.2% · 97.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.242. | |||||||
| 739 | CVE-2025-4632Samsung — Samsung MagicINFO 9 Server Path Traversal VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 24.1% · 97.8th | 2025-05-22 | 2025-06-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.241. | |||||||
| 740 | CVE-2021-21166Google — Google Chromium Race Condition VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 741 | CVE-2023-32439Apple — Apple Multiple Products WebKit Type Confusion VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 742 | CVE-2021-27878Veritas — Veritas Backup Exec Agent Command Execution VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 743 | CVE-2025-54948Trend Micro — Trend Micro Apex One OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 23.9% · 97.8th | 2025-08-18 | 2025-09-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.239. | |||||||
| 744 | CVE-2021-3560Red Hat — Red Hat Polkit Incorrect Authorization VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 23.7% · 97.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.237. | |||||||
| 745 | CVE-2016-4656Apple — Apple iOS Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 23.6% · 97.8th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.236. | |||||||
| 746 | CVE-2022-4262Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 23.5% · 97.8th | 2022-12-05 | 2022-12-26KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.235. | |||||||
| 747 | CVE-2023-28206Apple — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 8.6 | 23.2% · 97.8th | 2023-04-10 | 2023-05-01KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.232. | |||||||
| 748 | CVE-2015-5317Jenkins — Jenkins User Interface (UI) Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 75 | 7.5 | 23.0% · 97.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.230. | |||||||
| 749 | CVE-2023-32435Apple — Apple Multiple Products WebKit Memory Corruption VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 23.0% · 97.7th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.230. | |||||||
| 750 | CVE-2021-22899Ivanti — Ivanti Pulse Connect Secure Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 22.9% · 97.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.229. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCitrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 726 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 4.3 NVD
- EPSS
- 26.3% 98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Micro Focus — Micro Focus Access Manager Information Leakage Vulnerability
EVRS 75 Urgent
Rank 727 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 25.7% 98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Micro Focus
- Source
- CISA KEV
Oracle — Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 728 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 25.5% 98th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 729 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 25.2% 97.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Linux — Linux Kernel Heap-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 730 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.4 NVD
- EPSS
- 25.2% 97.9th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Trend Micro — Trend Micro OfficeScan Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 731 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 25.1% 97.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Adobe — Adobe Flash Player Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 732 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 25.1% 97.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium Network Service Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 733 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.9% 97.9th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Adobe — Adobe Flash Player Double Free Vulnerablity
EVRS 75 Urgent
Rank 734 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.8% 97.9th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 735 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.7% 97.9th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 736 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.1 NVD
- EPSS
- 24.6% 97.9th percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Code Execution Vulnerability
EVRS 75 Urgent
Rank 737 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.3% 97.9th percentile
- In CISA KEV since
- 2023-09-25
- CISA deadline
- 2023-10-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SAP — SAP NetWeaver XML External Entity (XXE) Vulnerability
EVRS 75 Urgent
Rank 738 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.5 NVD
- EPSS
- 24.2% 97.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability
EVRS 75 Urgent
Rank 739 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 24.1% 97.8th percentile
- In CISA KEV since
- 2025-05-22
- CISA deadline
- 2025-06-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Google — Google Chromium Race Condition Vulnerability
EVRS 75 Urgent
Rank 740 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Type Confusion Vulnerability
EVRS 75 Urgent
Rank 741 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent Command Execution Vulnerability
EVRS 75 Urgent
Rank 742 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 743 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 23.9% 97.8th percentile
- In CISA KEV since
- 2025-08-18
- CISA deadline
- 2025-09-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Red Hat — Red Hat Polkit Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 744 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 23.7% 97.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Apple — Apple iOS Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 745 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 23.6% 97.8th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 746 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 23.5% 97.8th percentile
- In CISA KEV since
- 2022-12-05
- CISA deadline
- 2022-12-26 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 747 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 23.2% 97.8th percentile
- In CISA KEV since
- 2023-04-10
- CISA deadline
- 2023-05-01 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Jenkins — Jenkins User Interface (UI) Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 748 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 23.0% 97.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 749 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 23.0% 97.7th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Command Injection Vulnerability
EVRS 75 Urgent
Rank 750 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.9% 97.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
