Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1551 | CVE-2026-98259Microsoft — fs/dax: check zero or empty entry before converting xarray entry | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1552 | CVE-2026-98447Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1553 | CVE-2026-98467Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1554 | CVE-2026-98472Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1555 | CVE-2026-98474Microsoft — s390/pci: Fix missing device lock in zpci_report_status() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1556 | CVE-2026-98585Microsoft — eth: fbnic: Avoid rounding zero ring sizes | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1557 | CVE-2026-98616Microsoft — eth: fbnic: reset num_napi when the napi vectors are freed | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1558 | CVE-2026-98633Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1559 | CVE-2026-98637Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1560 | CVE-2026-98638Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1561 | CVE-2026-98639Microsoft — KVM: riscv: Fix NACL hfence entry update order | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1562 | CVE-2026-98648Microsoft — s390/uv: Prevent potential out-of-bounds read | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1563 | CVE-2026-98674Microsoft — iio: adc: adi-axi-adc: Initialize state mutex | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1564 | CVE-2026-98675Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1565 | CVE-2026-98678Microsoft — iio: adc: ad4030: fix invalid oversampling_ratio validation | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1566 | CVE-2026-98683Microsoft — smb: client: flush dirty data before zeroing a range | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1567 | CVE-2026-98684Microsoft — smb: client: flush and commit data before querying allocated ranges | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1568 | CVE-2026-98689Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1569 | CVE-2026-98690Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1570 | CVE-2026-98691Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1571 | CVE-2026-98729Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1572 | CVE-2026-98774Microsoft — rust_binder: cancel deferred work items in thread exit | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1573 | CVE-2026-98821Microsoft — block: reject polled dio with user integrity metadata | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1574 | CVE-2026-98842Microsoft — module: fix lost error code from codetag_load_module() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1575 | CVE-2026-98843Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — fs/dax: check zero or empty entry before converting xarray entry
EVRS 0 Informational
Rank 1,551 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
EVRS 0 Informational
Rank 1,552 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
EVRS 0 Informational
Rank 1,553 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
EVRS 0 Informational
Rank 1,554 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/pci: Fix missing device lock in zpci_report_status()
EVRS 0 Informational
Rank 1,555 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Avoid rounding zero ring sizes
EVRS 0 Informational
Rank 1,556 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: reset num_napi when the napi vectors are freed
EVRS 0 Informational
Rank 1,557 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
EVRS 0 Informational
Rank 1,558 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
EVRS 0 Informational
Rank 1,559 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
EVRS 0 Informational
Rank 1,560 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: riscv: Fix NACL hfence entry update order
EVRS 0 Informational
Rank 1,561 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/uv: Prevent potential out-of-bounds read
EVRS 0 Informational
Rank 1,562 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: adi-axi-adc: Initialize state mutex
EVRS 0 Informational
Rank 1,563 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
EVRS 0 Informational
Rank 1,564 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ad4030: fix invalid oversampling_ratio validation
EVRS 0 Informational
Rank 1,565 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: flush dirty data before zeroing a range
EVRS 0 Informational
Rank 1,566 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: flush and commit data before querying allocated ranges
EVRS 0 Informational
Rank 1,567 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
EVRS 0 Informational
Rank 1,568 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled
EVRS 0 Informational
Rank 1,569 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped
EVRS 0 Informational
Rank 1,570 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
EVRS 0 Informational
Rank 1,571 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — rust_binder: cancel deferred work items in thread exit
EVRS 0 Informational
Rank 1,572 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — block: reject polled dio with user integrity metadata
EVRS 0 Informational
Rank 1,573 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — module: fix lost error code from codetag_load_module()
EVRS 0 Informational
Rank 1,574 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data
EVRS 0 Informational
Rank 1,575 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
