Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 826 | CVE-2024-12686BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 13.7% · 96.5th | 2025-01-13 | 2025-02-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.137. | |||||||
| 827 | CVE-2023-20867VMware — VMware Tools Authentication Bypass VulnerabilityKEV since 2023 · listed over a year | 75 | 3.9 | 13.6% · 96.5th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.136. | |||||||
| 828 | CVE-2015-4902Oracle — Oracle Java SE Integrity Check VulnerabilityKEV since 2022 · listed over a year | 75 | 5.3 | 13.6% · 96.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.136. | |||||||
| 829 | CVE-2021-27876Veritas — Veritas Backup Exec Agent File Access VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.1 | 13.5% · 96.4th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 830 | CVE-2019-3010Oracle — Oracle Solaris Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 13.4% · 96.4th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
| 831 | CVE-2023-41991Apple — Apple Multiple Products Improper Certificate Validation VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 13.4% · 96.4th | 2023-09-25 | 2023-10-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
| 832 | CVE-2021-30858Apple — Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 13.4% · 96.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.134. | |||||||
| 833 | CVE-2022-22948VMware — VMware vCenter Server Incorrect Default File Permissions VulnerabilityKEV since 2024 · listed over a year | 75 | 6.5 | 13.3% · 96.4th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.133. | |||||||
| 834 | CVE-2022-22675Apple — Apple macOS Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 12.5% · 96.2nd | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.125. | |||||||
| 835 | CVE-2023-32373Apple — Apple Multiple Products WebKit Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 12.2% · 96.2nd | 2023-05-22 | 2023-06-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.122. | |||||||
| 836 | CVE-2021-28663Arm — Arm Mali Graphics Processing Unit (GPU) Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 12.1% · 96.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.121. | |||||||
| 837 | CVE-2017-11292Adobe — Adobe Flash Player Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 11.9% · 96.1st | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.119. | |||||||
| 838 | CVE-2020-8599Trend Micro — Trend Micro Apex One and OfficeScan Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 11.9% · 96.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.119. | |||||||
| 839 | CVE-2021-37973Google — Google Chromium Portals Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 11.7% · 96.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.117. | |||||||
| 840 | CVE-2020-3118Cisco — Cisco IOS XR Software Discovery Protocol Format String VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 11.7% · 96.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.117. | |||||||
| 841 | CVE-2022-22587Apple — Apple Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 11.6% · 96th | 2022-01-28 | 2022-02-11KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.116. | |||||||
| 842 | CVE-2022-20821Cisco — Cisco IOS XR Open Port VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 11.5% · 96th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.115. | |||||||
| 843 | CVE-2025-48927TeleMessage — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityKEV since 2025 · listed over a year | 75 | 5.3 | 11.1% · 95.9th | 2025-07-01 | 2025-07-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 844 | CVE-2017-6740Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 11.1% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 845 | CVE-2013-0648Adobe — Adobe Flash Player Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.1% · 95.9th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.111. | |||||||
| 846 | CVE-2024-4761Google — Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.110. | |||||||
| 847 | CVE-2021-30762Apple — Apple iOS WebKit Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 11.0% · 95.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.110. | |||||||
| 848 | CVE-2025-6558Google — Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 849 | CVE-2020-8467Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
| 850 | CVE-2017-6738Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 10.9% · 95.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.109. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsBeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 826 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.2 NVD
- EPSS
- 13.7% 96.5th percentile
- In CISA KEV since
- 2025-01-13
- CISA deadline
- 2025-02-03 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
VMware — VMware Tools Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 827 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 3.9 NVD
- EPSS
- 13.6% 96.5th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Oracle — Oracle Java SE Integrity Check Vulnerability
EVRS 75 Urgent
Rank 828 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.3 NVD
- EPSS
- 13.6% 96.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent File Access Vulnerability
EVRS 75 Urgent
Rank 829 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.1 NVD
- EPSS
- 13.5% 96.4th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
Oracle — Oracle Solaris Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 830 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apple — Apple Multiple Products Improper Certificate Validation Vulnerability
EVRS 75 Urgent
Rank 831 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.5 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2023-09-25
- CISA deadline
- 2023-10-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 832 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 13.4% 96.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
VMware — VMware vCenter Server Incorrect Default File Permissions Vulnerability
EVRS 75 Urgent
Rank 833 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 6.5 NVD
- EPSS
- 13.3% 96.4th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Apple — Apple macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 834 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 12.5% 96.2nd percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 835 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 12.2% 96.2nd percentile
- In CISA KEV since
- 2023-05-22
- CISA deadline
- 2023-06-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Arm — Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 836 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 12.1% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Adobe — Adobe Flash Player Type Confusion Vulnerability
EVRS 75 Urgent
Rank 837 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.9% 96.1st percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 838 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.9% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Google — Google Chromium Portals Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 839 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.6 NVD
- EPSS
- 11.7% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco IOS XR Software Discovery Protocol Format String Vulnerability
EVRS 75 Urgent
Rank 840 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.7% 96.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 841 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.6% 96th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-02-11 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS XR Open Port Vulnerability
EVRS 75 Urgent
Rank 842 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 6.5 NVD
- EPSS
- 11.5% 96th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
TeleMessage — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
EVRS 75 Urgent
Rank 843 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.3 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2025-07-01
- CISA deadline
- 2025-07-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TeleMessage
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 844 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player Code Execution Vulnerability
EVRS 75 Urgent
Rank 845 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.1% 95.9th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
EVRS 75 Urgent
Rank 846 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.0% 95.9th percentile
- In CISA KEV since
- 2024-05-16
- CISA deadline
- 2024-06-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 847 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 11.0% 95.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 848 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2025-07-22
- CISA deadline
- 2025-08-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 849 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 850 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 10.9% 95.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
