Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1476 | CVE-2026-98510Microsoft — drm/xe/vm: nuke PTs only after unlinking contested VMAs | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1477 | CVE-2026-98512Microsoft — drm/nouveau: RCU-free the scheduler-containing nouveau_sched | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1478 | CVE-2026-98513Microsoft — drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1479 | CVE-2026-98546Microsoft — arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1480 | CVE-2026-98566Microsoft — drm/imagination: clamp freelist reconstruction requests | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1481 | CVE-2026-98596Microsoft — ipv6: Fix dst leak for uncached routes. | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1482 | CVE-2026-98601Microsoft — Bluetooth: btintel_pcie: validate device-supplied DMA indices | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1483 | CVE-2026-98618Microsoft — eth: fbnic: Handle maximum standalone channels | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1484 | CVE-2026-98658Microsoft — iio: proximity: aw96103: validate firmware data length | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1485 | CVE-2026-98673Microsoft — iio: adc: pac1934: check ACPI label duplication | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1486 | CVE-2026-98727Microsoft — nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known | 0 | — | 0.2% · 9.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1487 | CVE-2026-98431Microsoft — RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency | 0 | — | 0.2% · 9.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1488 | CVE-2026-98469Microsoft — KVM: arm64: Fix AArch32 DBGBXVR<n> handling | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1489 | CVE-2026-98480Microsoft — nfc: trf7970a: power down on startup RX gain failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1490 | CVE-2026-98492Microsoft — net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1491 | CVE-2026-98496Microsoft — net: airoha: npu: cancel wdt_work after releasing the WDT IRQ | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1492 | CVE-2026-98497Microsoft — net/mlx5e: fix swapped IPv6 IPsec policy masks | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1493 | CVE-2026-98542Microsoft — cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1494 | CVE-2026-98543Microsoft — bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1495 | CVE-2026-98552Microsoft — perf/core: Fix a refcount leak in attach_perf_ctx_data() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1496 | CVE-2026-98563Microsoft — net: phylink: record the PHY only once bringup cannot fail | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1497 | CVE-2026-98564Microsoft — net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1498 | CVE-2026-98571Microsoft — net: stmmac: clear stale buf->page after recycling on skb build failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1499 | CVE-2026-98574Microsoft — net: bcmgenet: stop Tx NAPI before disabling the queues | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1500 | CVE-2026-98584Microsoft — net/sched: fix potential stack infoleak in em_text_dump() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — drm/xe/vm: nuke PTs only after unlinking contested VMAs
EVRS 0 Informational
Rank 1,476 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/nouveau: RCU-free the scheduler-containing nouveau_sched
EVRS 0 Informational
Rank 1,477 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
EVRS 0 Informational
Rank 1,478 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — arm64/boot: Disable trapping of PMZR_EL0 writes to EL2
EVRS 0 Informational
Rank 1,479 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/imagination: clamp freelist reconstruction requests
EVRS 0 Informational
Rank 1,480 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ipv6: Fix dst leak for uncached routes.
EVRS 0 Informational
Rank 1,481 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: validate device-supplied DMA indices
EVRS 0 Informational
Rank 1,482 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Handle maximum standalone channels
EVRS 0 Informational
Rank 1,483 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: proximity: aw96103: validate firmware data length
EVRS 0 Informational
Rank 1,484 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: pac1934: check ACPI label duplication
EVRS 0 Informational
Rank 1,485 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
EVRS 0 Informational
Rank 1,486 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
EVRS 0 Informational
Rank 1,487 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Fix AArch32 DBGBXVR<n> handling
EVRS 0 Informational
Rank 1,488 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nfc: trf7970a: power down on startup RX gain failure
EVRS 0 Informational
Rank 1,489 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
EVRS 0 Informational
Rank 1,490 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
EVRS 0 Informational
Rank 1,491 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/mlx5e: fix swapped IPv6 IPsec policy masks
EVRS 0 Informational
Rank 1,492 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict
EVRS 0 Informational
Rank 1,493 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
EVRS 0 Informational
Rank 1,494 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — perf/core: Fix a refcount leak in attach_perf_ctx_data()
EVRS 0 Informational
Rank 1,495 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: phylink: record the PHY only once bringup cannot fail
EVRS 0 Informational
Rank 1,496 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq
EVRS 0 Informational
Rank 1,497 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: stmmac: clear stale buf->page after recycling on skb build failure
EVRS 0 Informational
Rank 1,498 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: bcmgenet: stop Tx NAPI before disabling the queues
EVRS 0 Informational
Rank 1,499 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/sched: fix potential stack infoleak in em_text_dump()
EVRS 0 Informational
Rank 1,500 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
