Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,956 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 2901 | CVE-2026-98615Microsoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2902 | CVE-2026-98641Microsoft — bpf, arm64: set up the frame pointer for the exception callback | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2903 | CVE-2026-98680Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2904 | CVE-2026-98702Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2905 | CVE-2026-98713Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2906 | CVE-2026-98728Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2907 | CVE-2026-98730Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2908 | CVE-2026-98791Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2909 | CVE-2026-98841Microsoft — virt: vmgenid: set driver_data before registering notification handlers | 0 | — | 0.2% · 5.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2910 | CVE-2026-98849Microsoft — pfcp: fix socket lifetime on netdevice registration failure | 0 | — | 0.2% · 5.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2911 | CVE-2026-98244Microsoft — btrfs: clear free space tree creation state on rebuild failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2912 | CVE-2026-98259Microsoft — fs/dax: check zero or empty entry before converting xarray entry | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2913 | CVE-2026-98447Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2914 | CVE-2026-98467Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2915 | CVE-2026-98472Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2916 | CVE-2026-98474Microsoft — s390/pci: Fix missing device lock in zpci_report_status() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2917 | CVE-2026-98585Microsoft — eth: fbnic: Avoid rounding zero ring sizes | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2918 | CVE-2026-98616Microsoft — eth: fbnic: reset num_napi when the napi vectors are freed | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2919 | CVE-2026-98633Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2920 | CVE-2026-98637Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2921 | CVE-2026-98638Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2922 | CVE-2026-98639Microsoft — KVM: riscv: Fix NACL hfence entry update order | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2923 | CVE-2026-98648Microsoft — s390/uv: Prevent potential out-of-bounds read | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2924 | CVE-2026-98674Microsoft — iio: adc: adi-axi-adc: Initialize state mutex | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2925 | CVE-2026-98675Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
EVRS 0 Informational
Rank 2,901 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf, arm64: set up the frame pointer for the exception callback
EVRS 0 Informational
Rank 2,902 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: accel: kionix-kx022a: Prevent memory leak and fix state
EVRS 0 Informational
Rank 2,903 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — wifi: mac80211: reject invalid 320 MHz CSA bandwidth
EVRS 0 Informational
Rank 2,904 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
EVRS 0 Informational
Rank 2,905 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — tpm: fix off-by-four bounds check in tpm2_get_random()
EVRS 0 Informational
Rank 2,906 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
EVRS 0 Informational
Rank 2,907 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
EVRS 0 Informational
Rank 2,908 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — virt: vmgenid: set driver_data before registering notification handlers
EVRS 0 Informational
Rank 2,909 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — pfcp: fix socket lifetime on netdevice registration failure
EVRS 0 Informational
Rank 2,910 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — btrfs: clear free space tree creation state on rebuild failure
EVRS 0 Informational
Rank 2,911 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — fs/dax: check zero or empty entry before converting xarray entry
EVRS 0 Informational
Rank 2,912 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
EVRS 0 Informational
Rank 2,913 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
EVRS 0 Informational
Rank 2,914 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
EVRS 0 Informational
Rank 2,915 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/pci: Fix missing device lock in zpci_report_status()
EVRS 0 Informational
Rank 2,916 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: Avoid rounding zero ring sizes
EVRS 0 Informational
Rank 2,917 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — eth: fbnic: reset num_napi when the napi vectors are freed
EVRS 0 Informational
Rank 2,918 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
EVRS 0 Informational
Rank 2,919 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
EVRS 0 Informational
Rank 2,920 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
EVRS 0 Informational
Rank 2,921 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — KVM: riscv: Fix NACL hfence entry update order
EVRS 0 Informational
Rank 2,922 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — s390/uv: Prevent potential out-of-bounds read
EVRS 0 Informational
Rank 2,923 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: adi-axi-adc: Initialize state mutex
EVRS 0 Informational
Rank 2,924 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
EVRS 0 Informational
Rank 2,925 of 2,956 tracked · as of 25 Oct 12:34 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
