Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 901 | CVE-2025-24472Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 8.1 | 7.2% · 94.3rd | 2025-03-18 | 2025-04-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 902 | CVE-2018-0158Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.2% · 94.3rd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.072. | |||||||
| 903 | CVE-2021-1879Apple — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 7.1% · 94.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 904 | CVE-2019-0344SAP — SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 7.1% · 94.2nd | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 905 | CVE-2017-12231Cisco — Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 906 | CVE-2017-12233Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 907 | CVE-2017-12234Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 908 | CVE-2017-12235Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 909 | CVE-2017-12237Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 910 | CVE-2018-0154Cisco — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 911 | CVE-2020-6820Mozilla — Mozilla Firefox And Thunderbird Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.1 | 7.1% · 94.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 912 | CVE-2021-30713Apple — Apple macOS Unspecified VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 7.0% · 94.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
| 913 | CVE-2021-1871Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 7.0% · 94.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
| 914 | CVE-2008-3431Oracle — Oracle VirtualBox Insufficient Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 6.9% · 94th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 915 | CVE-2018-0159Cisco — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 6.9% · 94th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 916 | CVE-2022-27518Citrix — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 6.9% · 94th | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 917 | CVE-2023-26369Adobe — Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 6.7% · 93.9th | 2023-09-14 | 2023-10-05KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 918 | CVE-2013-1675Mozilla — Mozilla Firefox Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 6.7% · 93.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 919 | CVE-2023-7024Google — Google Chromium WebRTC Heap Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 6.7% · 93.9th | 2024-01-02 | 2024-01-23KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 920 | CVE-2019-6693Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 6.5 | 6.6% · 93.9th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 921 | CVE-2021-22600Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.0 | 6.6% · 93.8th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.066. | |||||||
| 922 | CVE-2020-16010Google — Google Chrome for Android UI Heap Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 6.4% · 93.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.064. | |||||||
| 923 | CVE-2012-0767Adobe — Adobe Flash Player Cross-Site Scripting (XSS) VulnerabilityKEV since 2022 · listed over a year | 75 | 6.1 | 6.2% · 93.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
| 924 | CVE-2020-8468Trend Micro — Trend Micro Multiple Products Content Validation Escape VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 6.2% · 93.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
| 925 | CVE-2017-6627Cisco — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 6.2% · 93.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsFortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 901 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.1 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2025-03-18
- CISA deadline
- 2025-04-08 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
EVRS 75 Urgent
Rank 902 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 903 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.1 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SAP — SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 904 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2024-09-30
- CISA deadline
- 2024-10-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Cisco — Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 905 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 906 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 907 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 908 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 909 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 910 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Mozilla — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 911 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.1 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Apple — Apple macOS Unspecified Vulnerability
EVRS 75 Urgent
Rank 912 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 7.0% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 913 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.0% 94.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Oracle — Oracle VirtualBox Insufficient Input Validation Vulnerability
EVRS 75 Urgent
Rank 914 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 915 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Citrix — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 916 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 917 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2023-09-14
- CISA deadline
- 2023-10-05 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 918 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Google — Google Chromium WebRTC Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 919 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2024-01-02
- CISA deadline
- 2024-01-23 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
EVRS 75 Urgent
Rank 920 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 6.6% 93.9th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 921 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.0 NVD
- EPSS
- 6.6% 93.8th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Google — Google Chrome for Android UI Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 922 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.6 NVD
- EPSS
- 6.4% 93.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Adobe — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 923 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.1 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Content Validation Escape Vulnerability
EVRS 75 Urgent
Rank 924 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 925 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
