Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,596 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1576 | CVE-2026-98818Microsoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() | 0 | — | 0.2% · 5.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1577 | CVE-2026-98356Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1578 | CVE-2026-98371Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1579 | CVE-2026-98372Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1580 | CVE-2026-98858Microsoft — io_uring: fix task_work add use-after-free with SQPOLL | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1581 | CVE-2026-98844Microsoft — netfs: clear post-EOF pagecache when extending a file via write | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1582 | CVE-2026-98845Microsoft — tpm: Disable TPM on null key name mismatch | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1583 | CVE-2026-98444Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1584 | CVE-2026-98682Microsoft — smb: client: drain and invalidate before server-side copy/clone | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1585 | CVE-2026-98692Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1586 | CVE-2026-98788Microsoft — futex: Fix private hash use-after-free on resize | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1587 | CVE-2026-98437Microsoft — media: qcom: iris: fix runtime PM reference leaks | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1588 | CVE-2026-98867Microsoft — dm-pcache: bound the logical key offset from persistent memory | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1589 | CVE-2026-98376Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement | 0 | — | 0.1% · 3.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1590 | CVE-2026-98258Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list | 0 | — | 0.1% · 2.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1591 | CVE-2026-98281Microsoft — futex: Also allocate private hash on vfork() | 0 | — | 0.1% · 2.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1592 | CVE-2026-98256Microsoft — signal: Prevent exec() race | 0 | — | 0.1% · 2.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1593 | CVE-2026-98318Microsoft — smb: client: validate absolute native symlink targets before NT fixups | 0 | — | 0.1% · 2.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1594 | CVE-2026-98361Microsoft — RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths | 0 | — | 0.1% · 2.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1595 | CVE-2026-98228Microsoft — mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ | 0 | — | 0.1% · 1.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 1596 | CVE-2026-98230Microsoft — xfrm: use hlist_del_init_rcu for state_cache and state_cache_input | 0 | — | 0.1% · 1.6th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
EVRS 0 Informational
Rank 1,576 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
EVRS 0 Informational
Rank 1,577 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len
EVRS 0 Informational
Rank 1,578 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
EVRS 0 Informational
Rank 1,579 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — io_uring: fix task_work add use-after-free with SQPOLL
EVRS 0 Informational
Rank 1,580 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: clear post-EOF pagecache when extending a file via write
EVRS 0 Informational
Rank 1,581 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — tpm: Disable TPM on null key name mismatch
EVRS 0 Informational
Rank 1,582 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush
EVRS 0 Informational
Rank 1,583 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: drain and invalidate before server-side copy/clone
EVRS 0 Informational
Rank 1,584 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory
EVRS 0 Informational
Rank 1,585 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — futex: Fix private hash use-after-free on resize
EVRS 0 Informational
Rank 1,586 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — media: qcom: iris: fix runtime PM reference leaks
EVRS 0 Informational
Rank 1,587 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — dm-pcache: bound the logical key offset from persistent memory
EVRS 0 Informational
Rank 1,588 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement
EVRS 0 Informational
Rank 1,589 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 3.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
EVRS 0 Informational
Rank 1,590 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — futex: Also allocate private hash on vfork()
EVRS 0 Informational
Rank 1,591 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — signal: Prevent exec() race
EVRS 0 Informational
Rank 1,592 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: validate absolute native symlink targets before NT fixups
EVRS 0 Informational
Rank 1,593 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
EVRS 0 Informational
Rank 1,594 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 2.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
EVRS 0 Informational
Rank 1,595 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 1.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
EVRS 0 Informational
Rank 1,596 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- —
- EPSS
- 0.1% 1.6th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
