Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,956 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 2926 | CVE-2026-98678Microsoft — iio: adc: ad4030: fix invalid oversampling_ratio validation | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2927 | CVE-2026-98683Microsoft — smb: client: flush dirty data before zeroing a range | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2928 | CVE-2026-98689Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2929 | CVE-2026-98690Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2930 | CVE-2026-98691Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2931 | CVE-2026-98729Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2932 | CVE-2026-98774Microsoft — rust_binder: cancel deferred work items in thread exit | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2933 | CVE-2026-98821Microsoft — block: reject polled dio with user integrity metadata | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2934 | CVE-2026-98842Microsoft — module: fix lost error code from codetag_load_module() | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2935 | CVE-2026-98843Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data | 0 | — | 0.2% · 5.5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2936 | CVE-2026-98818Microsoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() | 0 | — | 0.2% · 5.1st | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2937 | CVE-2026-98356Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2938 | CVE-2026-98371Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2939 | CVE-2026-98372Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() | 0 | — | 0.2% · 5th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2940 | CVE-2026-98858Microsoft — io_uring: fix task_work add use-after-free with SQPOLL | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2941 | CVE-2026-98844Microsoft — netfs: clear post-EOF pagecache when extending a file via write | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2942 | CVE-2026-98845Microsoft — tpm: Disable TPM on null key name mismatch | 0 | — | 0.2% · 4.4th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2943 | CVE-2026-98444Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2944 | CVE-2026-98682Microsoft — smb: client: drain and invalidate before server-side copy/clone | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2945 | CVE-2026-98692Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2946 | CVE-2026-98788Microsoft — futex: Fix private hash use-after-free on resize | 0 | — | 0.2% · 4.3rd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2947 | CVE-2026-98437Microsoft — media: qcom: iris: fix runtime PM reference leaks | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2948 | CVE-2026-98867Microsoft — dm-pcache: bound the logical key offset from persistent memory | 0 | — | 0.2% · 4.2nd | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2949 | CVE-2026-98376Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement | 0 | — | 0.1% · 3.7th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
| 2950 | CVE-2026-98258Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list | 0 | — | 0.1% · 2.8th | — | — | |
Why it ranks here: No strong exploitation, disclosure, or severity signal is available for this CVE yet. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMicrosoft — iio: adc: ad4030: fix invalid oversampling_ratio validation
EVRS 0 Informational
Rank 2,926 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: flush dirty data before zeroing a range
EVRS 0 Informational
Rank 2,927 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
EVRS 0 Informational
Rank 2,928 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Fix domain reference leak when DPRX read is canceled
EVRS 0 Informational
Rank 2,929 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Tear down inactive DP tunnels when the domain is stopped
EVRS 0 Informational
Rank 2,930 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
EVRS 0 Informational
Rank 2,931 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — rust_binder: cancel deferred work items in thread exit
EVRS 0 Informational
Rank 2,932 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — block: reject polled dio with user integrity metadata
EVRS 0 Informational
Rank 2,933 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — module: fix lost error code from codetag_load_module()
EVRS 0 Informational
Rank 2,934 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: zero gaps in read-gaps folio to avoid writing back stale data
EVRS 0 Informational
Rank 2,935 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
EVRS 0 Informational
Rank 2,936 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5.1st percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
EVRS 0 Informational
Rank 2,937 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix runt reassembly panic from short inner tot_len
EVRS 0 Informational
Rank 2,938 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
EVRS 0 Informational
Rank 2,939 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 5th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — io_uring: fix task_work add use-after-free with SQPOLL
EVRS 0 Informational
Rank 2,940 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — netfs: clear post-EOF pagecache when extending a file via write
EVRS 0 Informational
Rank 2,941 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — tpm: Disable TPM on null key name mismatch
EVRS 0 Informational
Rank 2,942 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.4th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — xfs: drop dquot flush lock when we can't find a buffer to flush
EVRS 0 Informational
Rank 2,943 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — smb: client: drain and invalidate before server-side copy/clone
EVRS 0 Informational
Rank 2,944 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — thunderbolt: Make the DP tunnel activation callback mandatory
EVRS 0 Informational
Rank 2,945 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — futex: Fix private hash use-after-free on resize
EVRS 0 Informational
Rank 2,946 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.3rd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — media: qcom: iris: fix runtime PM reference leaks
EVRS 0 Informational
Rank 2,947 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — dm-pcache: bound the logical key offset from persistent memory
EVRS 0 Informational
Rank 2,948 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.2% 4.2nd percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — bpf: Use array_map_meta_equal for percpu array inner map replacement
EVRS 0 Informational
Rank 2,949 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.1% 3.7th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
Microsoft — posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
EVRS 0 Informational
Rank 2,950 of 2,956 tracked · as of 25 Oct 11:03 UTC
- CVSS
- —
- EPSS
- 0.1% 2.8th percentile
- Ransomware use
- Not known
- Vendor
- Microsoft
- Source
- Patch Tuesday
