Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1526 | CVE-2026-98223Microsoft — mm: filemap: retain mapped dropbehind folios | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1527 | CVE-2026-98224Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1528 | CVE-2026-98226Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1529 | CVE-2026-98274Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1530 | CVE-2026-98313Microsoft — drm/msm/dp: skip PUSH_IDLE when the link was never enabled | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1531 | CVE-2026-98446Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1532 | CVE-2026-98868Microsoft — dm-pcache: reject a kset that overruns its segment | 0 | — | 0.2% · 5.9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1533 | CVE-2026-98440Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1534 | CVE-2026-98445Microsoft — xfs: don't let memory failures leak blocks and kill repairs | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1535 | CVE-2026-98475Microsoft — s390/cmf: Fix virtual vs physical address confusion | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1536 | CVE-2026-98611Microsoft — bpf: Check params size before reading reserved fields | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1537 | CVE-2026-98615Microsoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1538 | CVE-2026-98641Microsoft — bpf, arm64: set up the frame pointer for the exception callback | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1539 | CVE-2026-98680Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1540 | CVE-2026-98702Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1541 | CVE-2026-98713Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1542 | CVE-2026-98728Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1543 | CVE-2026-98730Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1544 | CVE-2026-98781Microsoft — drm/mediatek: Fix pdev reference leak in mtk_drm_bind() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1545 | CVE-2026-98782Microsoft — drm/mediatek: Fix ovl adaptor platform device leak | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1546 | CVE-2026-98783Microsoft — drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1547 | CVE-2026-98791Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1548 | CVE-2026-98841Microsoft — virt: vmgenid: set driver_data before registering notification handlers | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1549 | CVE-2026-98849Microsoft — pfcp: fix socket lifetime on netdevice registration failure | 0 | — | 0.2% · 5.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1550 | CVE-2026-98244Microsoft — btrfs: clear free space tree creation state on rebuild failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — mm: filemap: retain mapped dropbehind folios
EVRS 0 Informational
Rank 1,526 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure
EVRS 0 Informational
Rank 1,527 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
EVRS 0 Informational
Rank 1,528 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
EVRS 0 Informational
Rank 1,529 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/msm/dp: skip PUSH_IDLE when the link was never enabled
EVRS 0 Informational
Rank 1,530 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init
EVRS 0 Informational
Rank 1,531 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — dm-pcache: reject a kset that overruns its segment
EVRS 0 Informational
Rank 1,532 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
EVRS 0 Informational
Rank 1,533 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let memory failures leak blocks and kill repairs
EVRS 0 Informational
Rank 1,534 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/cmf: Fix virtual vs physical address confusion
EVRS 0 Informational
Rank 1,535 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Check params size before reading reserved fields
EVRS 0 Informational
Rank 1,536 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
EVRS 0 Informational
Rank 1,537 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf, arm64: set up the frame pointer for the exception callback
EVRS 0 Informational
Rank 1,538 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state
EVRS 0 Informational
Rank 1,539 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth
EVRS 0 Informational
Rank 1,540 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
EVRS 0 Informational
Rank 1,541 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random()
EVRS 0 Informational
Rank 1,542 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
EVRS 0 Informational
Rank 1,543 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
EVRS 0 Informational
Rank 1,544 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Fix ovl adaptor platform device leak
EVRS 0 Informational
Rank 1,545 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
EVRS 0 Informational
Rank 1,546 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
EVRS 0 Informational
Rank 1,547 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — virt: vmgenid: set driver_data before registering notification handlers
EVRS 0 Informational
Rank 1,548 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — pfcp: fix socket lifetime on netdevice registration failure
EVRS 0 Informational
Rank 1,549 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — btrfs: clear free space tree creation state on rebuild failure
EVRS 0 Informational
Rank 1,550 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
