Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1451 | CVE-2026-102186Microsoft — Windows Network File System Information Disclosure Vulnerability | 6 | 4.7 | 0.3% · 22.7th | — | — | |
Why it ranks here: An EPSS probability of 0.003, and CVSS base score 4.7. | |||||||
| 1452 | CVE-2026-83697Microsoft — Windows Modern Device Management (MDM) Tampering Vulnerability | 6 | 4.7 | 0.2% · 9.5th | — | — | |
Why it ranks here: CVSS base score 4.7. | |||||||
| 1453 | CVE-2026-88094Microsoft — Azure Storage Library Elevation of Privilege Vulnerability | 4 | — | 0.6% · 49.7th | — | — | |
Why it ranks here: An EPSS probability of 0.006. | |||||||
| 1454 | CVE-2026-62840Microsoft — Linux Kernel Elevation of Privilege Vulnerability | 4 | — | 0.2% · 4.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1455 | CVE-2026-83831Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 4 | — | — | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1456 | CVE-2026-85898Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 4 | — | — | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1457 | CVE-2026-98420Microsoft — ksmbd: follow SMB2 session expiration semantics | 0 | — | 0.2% · 13.9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1458 | CVE-2026-98184Microsoft — wifi: mwifiex: prevent authentication frame length truncation | 0 | — | 0.2% · 12.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1459 | CVE-2026-98731Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() | 0 | — | 0.2% · 10.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1460 | CVE-2026-98392Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1461 | CVE-2026-98411Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1462 | CVE-2026-98412Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1463 | CVE-2026-98522Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1464 | CVE-2026-98523Microsoft — drm/client: fix restore of partially initialized client | 0 | — | 0.2% · 10.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1465 | CVE-2026-98528Microsoft — gpio: cdev: fix kernel stack leak to user-space in error path | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1466 | CVE-2026-98533Microsoft — ipe: protect the dm-verity root hash with RCU | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1467 | CVE-2026-98534Microsoft — ipe: fix use-after-free when auditing a newly loaded policy | 0 | — | 0.2% · 10.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1468 | CVE-2026-98408Microsoft — watchdog: rzv2h: Avoid division by zero | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1469 | CVE-2026-98296Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_sync | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1470 | CVE-2026-98390Microsoft — x86/amd_node: Avoid divide by zero on virtualized systems | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1471 | CVE-2026-98414Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages() | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1472 | CVE-2026-98415Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1473 | CVE-2026-98759Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() | 0 | — | 0.2% · 10.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1474 | CVE-2026-98468Microsoft — KVM: arm64: Fix spurious warning for benign stage 2 teardown race | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1475 | CVE-2026-98487Microsoft — net: bridge: mdb: restart port group walk after deletion | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — Windows Network File System Information Disclosure Vulnerability
EVRS 6 Routine
Rank 1,451 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.7
- EPSS
- 0.3% 22.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Windows Modern Device Management (MDM) Tampering Vulnerability
EVRS 6 Routine
Rank 1,452 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.7
- EPSS
- 0.2% 9.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Azure Storage Library Elevation of Privilege Vulnerability
EVRS 4 Routine
Rank 1,453 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.6% 49.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Linux Kernel Elevation of Privilege Vulnerability
EVRS 4 Routine
Rank 1,454 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 4.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EVRS 4 Routine
Rank 1,455 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- —
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EVRS 4 Routine
Rank 1,456 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- —
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ksmbd: follow SMB2 session expiration semantics
EVRS 0 Informational
Rank 1,457 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 13.9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: mwifiex: prevent authentication frame length truncation
EVRS 0 Informational
Rank 1,458 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 12.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
EVRS 0 Informational
Rank 1,459 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
EVRS 0 Informational
Rank 1,460 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
EVRS 0 Informational
Rank 1,461 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
EVRS 0 Informational
Rank 1,462 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
EVRS 0 Informational
Rank 1,463 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/client: fix restore of partially initialized client
EVRS 0 Informational
Rank 1,464 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — gpio: cdev: fix kernel stack leak to user-space in error path
EVRS 0 Informational
Rank 1,465 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipe: protect the dm-verity root hash with RCU
EVRS 0 Informational
Rank 1,466 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipe: fix use-after-free when auditing a newly loaded policy
EVRS 0 Informational
Rank 1,467 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — watchdog: rzv2h: Avoid division by zero
EVRS 0 Informational
Rank 1,468 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_sync
EVRS 0 Informational
Rank 1,469 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — x86/amd_node: Avoid divide by zero on virtualized systems
EVRS 0 Informational
Rank 1,470 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
EVRS 0 Informational
Rank 1,471 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
EVRS 0 Informational
Rank 1,472 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()
EVRS 0 Informational
Rank 1,473 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 10.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Fix spurious warning for benign stage 2 teardown race
EVRS 0 Informational
Rank 1,474 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: bridge: mdb: restart port group walk after deletion
EVRS 0 Informational
Rank 1,475 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
