Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1026 | CVE-2020-9819Apple — Apple iOS, iPadOS, and watchOS Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 2.2% · 82.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 1027 | CVE-2017-12232Cisco — Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.2% · 82nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 1028 | CVE-2017-6663Cisco — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.1% · 81.7th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
| 1029 | CVE-2023-6448Unitronics — Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 2.1% · 81.4th | 2023-12-11 | 2023-12-18KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
| 1030 | CVE-2017-12238Cisco — Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.0% · 80.7th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 1031 | CVE-2025-0111Palo Alto Networks — Palo Alto Networks PAN-OS File Read VulnerabilityKEV since 2025 · listed over a year | 75 | 7.1 | 2.0% · 80.6th | 2025-02-20 | 2025-03-13KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 1032 | CVE-2020-2506QNAP Systems — QNAP Helpdesk Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 2.0% · 80.4th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 1033 | CVE-2025-8875N-able — N-able N-Central Insecure Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 9.4 | 1.9% · 79.5th | 2025-08-13 | 2025-08-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 1034 | CVE-2025-27920Srimax — Srimax Output Messenger Directory Traversal VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 1.9% · 79.1st | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 1035 | CVE-2025-59689Libraesva — Libraesva Email Security Gateway Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 1.9% · 79.1st | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 1036 | CVE-2018-19322GIGABYTE — GIGABYTE Multiple Products Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 1.8% · 78.5th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 1037 | CVE-2025-22226VMware — VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityKEV since 2025 · listed over a year | 75 | 6.0 | 1.8% · 77.9th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 1038 | CVE-2025-21590Juniper — Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityKEV since 2025 · listed over a year | 75 | 6.7 | 1.7% · 77.5th | 2025-03-13 | 2025-04-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 1039 | CVE-2024-21287Oracle — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityKEV since 2024 · listed over a year | 75 | 7.5 | 1.7% · 77.3rd | 2024-11-21 | 2024-12-12KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 1040 | CVE-2024-39891Twilio — Twilio Authy Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 75 | 5.3 | 1.7% · 76.6th | 2024-07-23 | 2024-08-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 1041 | CVE-2020-11261Qualcomm — Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.6% · 75.6th | 2021-12-01 | 2022-06-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 1042 | CVE-2025-22224VMware — VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityKEV since 2025 · listed over a year | 75 | 8.2 | 1.6% · 75th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 1043 | CVE-2019-8720WebKitGTK — WebKitGTK Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 1.6% · 74.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 1044 | CVE-2021-1905Qualcomm — Qualcomm Multiple Chipsets Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.5% · 74.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 1045 | CVE-2013-2597Code Aurora — Code Aurora ACDB Audio Driver Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.4 | 1.5% · 74.1st | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 1046 | CVE-2021-36742Trend Micro — Trend Micro Multiple Products Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.5% · 73.7th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 1047 | CVE-2024-23225Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.5% · 73.7th | 2024-03-06 | 2024-03-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 1048 | CVE-2023-20963Android — Android Framework Privilege Escalation VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 1.5% · 73.4th | 2023-04-13 | 2023-05-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 1049 | CVE-2024-23296Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.4% · 72.4th | 2024-03-06 | 2024-03-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 1050 | CVE-2023-41990Apple — Apple Multiple Products Code Execution VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 1.4% · 72nd | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 1,026 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.3 NVD
- EPSS
- 2.2% 82.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 1,027 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.2% 82nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 1,028 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.1% 81.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Unitronics — Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
EVRS 75 Urgent
Rank 1,029 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.1% 81.4th percentile
- In CISA KEV since
- 2023-12-11
- CISA deadline
- 2023-12-18 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Unitronics
- Source
- CISA KEV
Cisco — Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 1,030 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.0% 80.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS File Read Vulnerability
EVRS 75 Urgent
Rank 1,031 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.1 NVD
- EPSS
- 2.0% 80.6th percentile
- In CISA KEV since
- 2025-02-20
- CISA deadline
- 2025-03-13 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
QNAP Systems — QNAP Helpdesk Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 1,032 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.0% 80.4th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- QNAP Systems
- Source
- CISA KEV
N-able — N-able N-Central Insecure Deserialization Vulnerability
EVRS 75 Urgent
Rank 1,033 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.9% 79.5th percentile
- In CISA KEV since
- 2025-08-13
- CISA deadline
- 2025-08-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
Srimax — Srimax Output Messenger Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 1,034 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.9% 79.1st percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Srimax
- Source
- CISA KEV
Libraesva — Libraesva Email Security Gateway Command Injection Vulnerability
EVRS 75 Urgent
Rank 1,035 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 1.9% 79.1st percentile
- In CISA KEV since
- 2025-09-29
- CISA deadline
- 2025-10-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Libraesva
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 1,036 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.8% 78.5th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
VMware — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 1,037 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.0 NVD
- EPSS
- 1.8% 77.9th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Juniper — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
EVRS 75 Urgent
Rank 1,038 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.7 NVD
- EPSS
- 1.7% 77.5th percentile
- In CISA KEV since
- 2025-03-13
- CISA deadline
- 2025-04-03 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
Oracle — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 1,039 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.7% 77.3rd percentile
- In CISA KEV since
- 2024-11-21
- CISA deadline
- 2024-12-12 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Twilio — Twilio Authy Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 1,040 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 1.7% 76.6th percentile
- In CISA KEV since
- 2024-07-23
- CISA deadline
- 2024-08-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Twilio
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 1,041 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.6% 75.6th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2022-06-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
VMware — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
EVRS 75 Urgent
Rank 1,042 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 1.6% 75th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
WebKitGTK — WebKitGTK Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 1,043 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.6% 74.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- WebKitGTK
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 1,044 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 74.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Code Aurora — Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 1,045 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 1.5% 74.1st percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Code Aurora
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 1,046 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 1,047 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.7th percentile
- In CISA KEV since
- 2024-03-06
- CISA deadline
- 2024-03-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 1,048 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.5% 73.4th percentile
- In CISA KEV since
- 2023-04-13
- CISA deadline
- 2023-05-04 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 1,049 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72.4th percentile
- In CISA KEV since
- 2024-03-06
- CISA deadline
- 2024-03-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 1,050 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72nd percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
