Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,956 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 2876 | CVE-2026-98723Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2877 | CVE-2026-98724Microsoft — nvmet: pci-epf: reject too-short SGL segments | 0 | — | 0.2% · 9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2878 | CVE-2026-98804Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() | 0 | — | 0.2% · 9.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2879 | CVE-2026-98350Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present | 0 | — | 0.2% · 8.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2880 | CVE-2026-98562Microsoft — net: libwx: fix races in Tx timestamp handling | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2881 | CVE-2026-98617Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector | 0 | — | 0.2% · 8.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2882 | CVE-2026-98277Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop | 0 | — | 0.2% · 7.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2883 | CVE-2026-98240Microsoft — net: ip_tunnel: initialize `options_len` before referencing options | 0 | — | 0.2% · 7.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2884 | CVE-2026-98806Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled | 0 | — | 0.2% · 7.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2885 | CVE-2026-98613Microsoft — bpf: Bound ownership depth through local kptrs and graph roots | 0 | — | 0.2% · 6.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2886 | CVE-2026-98235Microsoft — net/sched: act_api: release tail references on DELACTION failure | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2887 | CVE-2026-98267Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2888 | CVE-2026-98291Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2889 | CVE-2026-98346Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2890 | CVE-2026-98448Microsoft — xfs: release orphanage dir inode if chown fails | 0 | — | 0.2% · 6.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2891 | CVE-2026-98223Microsoft — mm: filemap: retain mapped dropbehind folios | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2892 | CVE-2026-98224Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2893 | CVE-2026-98226Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2894 | CVE-2026-98274Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2895 | CVE-2026-98446Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init | 0 | — | 0.2% · 6.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2896 | CVE-2026-98868Microsoft — dm-pcache: reject a kset that overruns its segment | 0 | — | 0.2% · 5.9th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2897 | CVE-2026-98440Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2898 | CVE-2026-98445Microsoft — xfs: don't let memory failures leak blocks and kill repairs | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2899 | CVE-2026-98475Microsoft — s390/cmf: Fix virtual vs physical address confusion | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2900 | CVE-2026-98611Microsoft — bpf: Check params size before reading reserved fields | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — nvmet: copy the hostid into the ctrl before creating PR pc_refs
EVRS 0 Informational
Rank 2,876 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — nvmet: pci-epf: reject too-short SGL segments
EVRS 0 Informational
Rank 2,877 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
EVRS 0 Informational
Rank 2,878 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 9.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if present
EVRS 0 Informational
Rank 2,879 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 8.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: libwx: fix races in Tx timestamp handling
EVRS 0 Informational
Rank 2,880 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vector
EVRS 0 Informational
Rank 2,881 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 8.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: ring the doorbell if a burst ends in a drop
EVRS 0 Informational
Rank 2,882 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 7.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: ip_tunnel: initialize `options_len` before referencing options
EVRS 0 Informational
Rank 2,883 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 7.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
EVRS 0 Informational
Rank 2,884 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 7.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Bound ownership depth through local kptrs and graph roots
EVRS 0 Informational
Rank 2,885 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/sched: act_api: release tail references on DELACTION failure
EVRS 0 Informational
Rank 2,886 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
EVRS 0 Informational
Rank 2,887 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
EVRS 0 Informational
Rank 2,888 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevs
EVRS 0 Informational
Rank 2,889 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: release orphanage dir inode if chown fails
EVRS 0 Informational
Rank 2,890 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm: filemap: retain mapped dropbehind folios
EVRS 0 Informational
Rank 2,891 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm/vma: correctly unaccount on mmap_prepare() failure
EVRS 0 Informational
Rank 2,892 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
EVRS 0 Informational
Rank 2,893 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
EVRS 0 Informational
Rank 2,894 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let hidden_space go negative in xfs_metafile_resv_init
EVRS 0 Informational
Rank 2,895 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 6.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — dm-pcache: reject a kset that overruns its segment
EVRS 0 Informational
Rank 2,896 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 5.9th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
EVRS 0 Informational
Rank 2,897 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: don't let memory failures leak blocks and kill repairs
EVRS 0 Informational
Rank 2,898 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/cmf: Fix virtual vs physical address confusion
EVRS 0 Informational
Rank 2,899 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Check params size before reading reserved fields
EVRS 0 Informational
Rank 2,900 of 2,956 tracked · as of 25 Oct 13:15 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
