Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1501 | CVE-2026-98592Microsoft — net: spacemit: clear TX descriptor on fragment mapping failure | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1502 | CVE-2026-98595Microsoft — udp: remove a disconnected socket from the 4-tuple hash table | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1503 | CVE-2026-98603Microsoft — ovpn: replace bind when clearing stale local source | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1504 | CVE-2026-98604Microsoft — ovpn: replace bind when learning local endpoint | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1505 | CVE-2026-98630Microsoft — eth: fbnic: Fix payload page pool error cleanup | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1506 | CVE-2026-98659Microsoft — iio: pressure: rohm-bm1390: Return error when read fails | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1507 | CVE-2026-98676Microsoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registration | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1508 | CVE-2026-98693Microsoft — thunderbolt: Hold a router reference for each allocated HopID | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1509 | CVE-2026-98723Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1510 | CVE-2026-98724Microsoft — nvmet: pci-epf: reject too-short SGL segments | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1511 | CVE-2026-98804Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1512 | CVE-2026-98350Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present | 0 | — | 0.2% · 8.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1513 | CVE-2026-98562Microsoft — net: libwx: fix races in Tx timestamp handling | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1514 | CVE-2026-98617Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1515 | CVE-2026-98277Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop | 0 | — | 0.2% · 7.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1516 | CVE-2026-98196Microsoft — wifi: brcmsmac: fix UAF in brcms_free_timer() | 0 | — | 0.2% · 7.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1517 | CVE-2026-98240Microsoft — net: ip_tunnel: initialize `options_len` before referencing options | 0 | — | 0.2% · 7.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1518 | CVE-2026-98806Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled | 0 | — | 0.2% · 7.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1519 | CVE-2026-98375Microsoft — xen/netfront: drop RX packets with a short Ethernet header | 0 | — | 0.2% · 6.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1520 | CVE-2026-98613Microsoft — bpf: Bound ownership depth through local kptrs and graph roots | 0 | — | 0.2% · 6.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1521 | CVE-2026-98235Microsoft — net/sched: act_api: release tail references on DELACTION failure | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1522 | CVE-2026-98267Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1523 | CVE-2026-98291Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1524 | CVE-2026-98346Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1525 | CVE-2026-98448Microsoft — xfs: release orphanage dir inode if chown fails | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — net: spacemit: clear TX descriptor on fragment mapping failure
EVRS 0 Informational
Rank 1,501 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — udp: remove a disconnected socket from the 4-tuple hash table
EVRS 0 Informational
Rank 1,502 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ovpn: replace bind when clearing stale local source
EVRS 0 Informational
Rank 1,503 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — ovpn: replace bind when learning local endpoint
EVRS 0 Informational
Rank 1,504 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Fix payload page pool error cleanup
EVRS 0 Informational
Rank 1,505 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: pressure: rohm-bm1390: Return error when read fails
EVRS 0 Informational
Rank 1,506 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registration
EVRS 0 Informational
Rank 1,507 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Hold a router reference for each allocated HopID
EVRS 0 Informational
Rank 1,508 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs
EVRS 0 Informational
Rank 1,509 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvmet: pci-epf: reject too-short SGL segments
EVRS 0 Informational
Rank 1,510 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
EVRS 0 Informational
Rank 1,511 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present
EVRS 0 Informational
Rank 1,512 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 8.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: libwx: fix races in Tx timestamp handling
EVRS 0 Informational
Rank 1,513 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector
EVRS 0 Informational
Rank 1,514 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop
EVRS 0 Informational
Rank 1,515 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 7.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: brcmsmac: fix UAF in brcms_free_timer()
EVRS 0 Informational
Rank 1,516 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 7.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: ip_tunnel: initialize `options_len` before referencing options
EVRS 0 Informational
Rank 1,517 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 7.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
EVRS 0 Informational
Rank 1,518 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 7.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xen/netfront: drop RX packets with a short Ethernet header
EVRS 0 Informational
Rank 1,519 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Bound ownership depth through local kptrs and graph roots
EVRS 0 Informational
Rank 1,520 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/sched: act_api: release tail references on DELACTION failure
EVRS 0 Informational
Rank 1,521 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
EVRS 0 Informational
Rank 1,522 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
EVRS 0 Informational
Rank 1,523 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs
EVRS 0 Informational
Rank 1,524 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: release orphanage dir inode if chown fails
EVRS 0 Informational
Rank 1,525 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
