Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1001 | CVE-2021-30666Apple — Apple iOS WebKit Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 3.0% · 87.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.030. | |||||||
| 1002 | CVE-2021-29256Arm — Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 3.0% · 87.2nd | 2023-07-07 | 2023-07-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.030. | |||||||
| 1003 | CVE-2024-32896Android — Android Pixel Privilege Escalation VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 3.0% · 87.2nd | 2024-06-13 | 2024-07-04KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.030. | |||||||
| 1004 | CVE-2024-7262Kingsoft — Kingsoft WPS Office Path Traversal VulnerabilityKEV since 2024 · listed over a year | 75 | 9.3 | 2.9% · 87th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.029. | |||||||
| 1005 | CVE-2021-30983Apple — Apple iOS and iPadOS Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 2.9% · 86.9th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.029. | |||||||
| 1006 | CVE-2023-38606Apple — Apple Multiple Products Kernel Unspecified VulnerabilityKEV since 2023 · listed over a year | 75 | 5.5 | 2.9% · 86.8th | 2023-07-26 | 2023-08-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.029. | |||||||
| 1007 | CVE-2021-25337Samsung — Samsung Mobile Devices Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 75 | 7.1 | 2.8% · 86.4th | 2022-11-08 | 2022-11-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.028. | |||||||
| 1008 | CVE-2020-16013Google — Google Chromium V8 Incorrect Implementation VulnerabililtyKEV since 2021 · listed over a year | 75 | 8.8 | 2.8% · 86.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.028. | |||||||
| 1009 | CVE-2020-16017Google — Google Chrome Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 2.7% · 86th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 1010 | CVE-2022-42948Fortra — Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 2.7% · 85.8th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 1011 | CVE-2024-36971Android — Android Kernel Remote Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 2.7% · 85.8th | 2024-08-07 | 2024-08-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 1012 | CVE-2023-29492Novi Survey — Novi Survey Insecure Deserialization VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 2.7% · 85.7th | 2023-04-13 | 2023-05-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 1013 | CVE-2020-24557Trend Micro — Trend Micro Multiple Products Improper Access Control VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 2.7% · 85.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.027. | |||||||
| 1014 | CVE-2023-35674Android — Android Framework Privilege Escalation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 2.6% · 85.4th | 2023-09-13 | 2023-10-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 1015 | CVE-2019-6223Apple — Apple iOS and macOS Group Facetime VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 2.6% · 85.4th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 1016 | CVE-2023-21492Samsung — Samsung Mobile Devices Insertion of Sensitive Information Into Log File VulnerabilityKEV since 2023 · listed over a year | 75 | 4.4 | 2.6% · 84.9th | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.026. | |||||||
| 1017 | CVE-2022-0028Palo Alto Networks — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 2.5% · 84.8th | 2022-08-22 | 2022-09-12KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 1018 | CVE-2025-30154reviewdog — reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 2.5% · 84.5th | 2025-03-24 | 2025-04-14KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 1019 | CVE-2023-20109Cisco — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 6.6 | 2.5% · 84.5th | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 1020 | CVE-2025-3928Commvault — Commvault Web Server Unspecified VulnerabilityKEV since 2025 · listed over a year | 75 | 8.7 | 2.5% · 84.5th | 2025-04-28 | 2025-05-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 1021 | CVE-2018-4344Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 2.4% · 83.7th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 1022 | CVE-2022-26486Mozilla — Mozilla Firefox Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 9.6 | 2.4% · 83.6th | 2022-03-07 | 2022-03-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 1023 | CVE-2020-9818Apple — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 2.3% · 83rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 1024 | CVE-2021-1782Apple — Apple Multiple Products Race Condition VulnerabilityKEV since 2021 · listed over a year | 75 | 7.0 | 2.2% · 82.5th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 1025 | CVE-2025-21043Samsung — Samsung Mobile Devices Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 2.2% · 82.5th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple iOS WebKit Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 1,001 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.0% 87.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Arm — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 1,002 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.0% 87.2nd percentile
- In CISA KEV since
- 2023-07-07
- CISA deadline
- 2023-07-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arm
- Source
- CISA KEV
Android — Android Pixel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 1,003 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.0% 87.2nd percentile
- In CISA KEV since
- 2024-06-13
- CISA deadline
- 2024-07-04 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Kingsoft — Kingsoft WPS Office Path Traversal Vulnerability
EVRS 75 Urgent
Rank 1,004 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.9% 87th percentile
- In CISA KEV since
- 2024-09-03
- CISA deadline
- 2024-09-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Kingsoft
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 1,005 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.9% 86.9th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Kernel Unspecified Vulnerability
EVRS 75 Urgent
Rank 1,006 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 2.9% 86.8th percentile
- In CISA KEV since
- 2023-07-26
- CISA deadline
- 2023-08-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 1,007 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.1 NVD
- EPSS
- 2.8% 86.4th percentile
- In CISA KEV since
- 2022-11-08
- CISA deadline
- 2022-11-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Google — Google Chromium V8 Incorrect Implementation Vulnerabililty
EVRS 75 Urgent
Rank 1,008 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.8% 86.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chrome Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 1,009 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.6 NVD
- EPSS
- 2.7% 86th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortra — Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 1,010 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.7% 85.8th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortra
- Source
- CISA KEV
Android — Android Kernel Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 1,011 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.7% 85.8th percentile
- In CISA KEV since
- 2024-08-07
- CISA deadline
- 2024-08-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Novi Survey — Novi Survey Insecure Deserialization Vulnerability
EVRS 75 Urgent
Rank 1,012 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.7% 85.7th percentile
- In CISA KEV since
- 2023-04-13
- CISA deadline
- 2023-05-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Novi Survey
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 1,013 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.7% 85.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 1,014 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.6% 85.4th percentile
- In CISA KEV since
- 2023-09-13
- CISA deadline
- 2023-10-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Apple — Apple iOS and macOS Group Facetime Vulnerability
EVRS 75 Urgent
Rank 1,015 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 2.6% 85.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
EVRS 75 Urgent
Rank 1,016 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.4 NVD
- EPSS
- 2.6% 84.9th percentile
- In CISA KEV since
- 2023-05-19
- CISA deadline
- 2023-06-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 1,017 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.5% 84.8th percentile
- In CISA KEV since
- 2022-08-22
- CISA deadline
- 2022-09-12 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
reviewdog — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 1,018 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2025-03-24
- CISA deadline
- 2025-04-14 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- reviewdog
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 1,019 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.6 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2023-10-10
- CISA deadline
- 2023-10-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Commvault — Commvault Web Server Unspecified Vulnerability
EVRS 75 Urgent
Rank 1,020 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.7 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2025-04-28
- CISA deadline
- 2025-05-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Commvault
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 1,021 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.4% 83.7th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Mozilla — Mozilla Firefox Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 1,022 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.6 NVD
- EPSS
- 2.4% 83.6th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-03-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 1,023 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.3% 83rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Race Condition Vulnerability
EVRS 75 Urgent
Rank 1,024 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.0 NVD
- EPSS
- 2.2% 82.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 1,025 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.2% 82.5th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
