Skip to main content
EVULNABLE
Home

Adobe

CVEs currently on EVULNABLE's Priority Feed for Adobe, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 1 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 1 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 1 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 1 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
1
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1810
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0610
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0710
2026-09-1400
2026-09-2110
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 82 Adobe CVEs in EVULNABLE's ranked feed.

Top 50 Top 100 Top 200
#1 94 Immediate CVE-2023-29300 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-01-08

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 94 Immediate CVE-2010-2861 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability KEV + ransomware, EPSS 99.7%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.7% · 99.95th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#3 93 Immediate CVE-2023-38203 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability KEV + ransomware, EPSS 97.1%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.1% · 99.89th pctlKEV since2024-01-08

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#4 92 Immediate CVE-2016-4117 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability KEV + ransomware, EPSS 94.4%

EVRS 92/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS94.4% · 99.85th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#5 91 Immediate CVE-2008-2992 KEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Input Validation Vulnerability KEV + ransomware, EPSS 98.5%

EVRS 91/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS98.5% · 99.92nd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#6 89 Immediate CVE-2026-71362 CISA federal deadline · Overdue by 20 daysCISA KEV Adobe — Adobe Commerce and Magento Incorrect Authorization Vulnerability KEV, EPSS 87.5%, added to KEV within the last 30 days

EVRS 89/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS87.5% · 99.76th pctlKEV since2026-09-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.875.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#7 88 Immediate CVE-2018-15982 KEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV + ransomware, EPSS 89.6%

EVRS 88/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS89.6% · 99.79th pctlKEV since2022-02-15

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#8 88 Immediate CVE-2018-4878 KEV since 2021 · listed over a yearRansomwareCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV + ransomware, EPSS 89.5%

EVRS 88/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS89.5% · 99.79th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#9 88 Immediate CVE-2010-0188 KEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability KEV + ransomware, EPSS 88.2%

EVRS 88/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS88.2% · 99.77th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#10 87 Immediate CVE-2024-34102 ExigentKEV since 2024 · listed over a yearCISA KEV Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-07-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#11 87 Immediate CVE-2018-15961 ExigentKEV since 2021 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Unrestricted File Upload Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗
#12 87 Immediate CVE-2014-0497 ExigentKEV since 2024 · listed over a yearCISA KEV Adobe — Adobe Flash Player Integer Underflow Vulnerablity KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2024-09-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#13 87 Immediate CVE-2015-3113 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability KEV, EPSS 99.8%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.8% · 99.96th pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.

Full CVE pageNVD ↗CISA KEV ↗
#14 87 Immediate CVE-2015-5119 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 99.3%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.3% · 99.94th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.

Full CVE pageNVD ↗CISA KEV ↗
#15 87 Immediate CVE-2022-24086 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability KEV, EPSS 99.2%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.2% · 99.94th pctlKEV since2022-02-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.

Full CVE pageNVD ↗CISA KEV ↗
#16 87 Immediate CVE-2025-54236 ExigentCISA federal deadline · Overdue by 11 monthsCISA KEV Adobe — Adobe Commerce and Magento Improper Input Validation Vulnerability KEV, EPSS 94.5%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS94.5% · 99.85th pctlKEV since2025-10-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.945.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#17 87 Immediate CVE-2009-3960 KEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe BlazeDS Information Disclosure Vulnerability KEV + ransomware, EPSS 90.1%

EVRS 87/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS90.1% · 99.8th pctlKEV since2022-03-07

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#18 86 Immediate CVE-2011-0611 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Remote Code Execution Vulnerability KEV, EPSS 99.4%

EVRS 86/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS99.4% · 99.94th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.

Full CVE pageNVD ↗CISA KEV ↗
#19 86 Immediate CVE-2015-0313 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 95.3%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS95.3% · 99.87th pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.953.

Full CVE pageNVD ↗CISA KEV ↗
#20 86 Immediate CVE-2017-3066 ExigentKEV since 2025 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Deserialization Vulnerability KEV, EPSS 90.6%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS90.6% · 99.8th pctlKEV since2025-02-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.906.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#21 85 Immediate CVE-2023-26360 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability KEV, EPSS 97.3%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS97.3% · 99.9th pctlKEV since2023-03-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#22 85 Immediate CVE-2009-0927 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability KEV, EPSS 96.6%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS96.6% · 99.89th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.966.

Full CVE pageNVD ↗CISA KEV ↗
#23 85 Immediate CVE-2015-5122 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 93.9%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS93.9% · 99.85th pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.939.

Full CVE pageNVD ↗CISA KEV ↗
#24 85 Immediate CVE-2013-0625 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Authentication Bypass Vulnerability KEV, EPSS 93.8%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS93.8% · 99.84th pctlKEV since2022-03-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.938.

Full CVE pageNVD ↗CISA KEV ↗
#25 85 Immediate CVE-2013-0632 ExigentKEV since 2022 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Authentication Bypass Vulnerability KEV, EPSS 93.6%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS93.6% · 99.84th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.936.

Full CVE pageNVD ↗CISA KEV ↗
#26 85 Immediate CVE-2025-54253 KEV since 2025 · listed over a yearCISA KEV Adobe — Adobe Experience Manager Forms Code Execution Vulnerability KEV, EPSS 88.3%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS88.3% · 99.77th pctlKEV since2025-10-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.883.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#27 85 Immediate CVE-2009-3459 CISA federal deadline · Overdue by 4 monthsCISA KEV Adobe — Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability KEV, EPSS 86.6%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS86.6% · 99.74th pctlKEV since2026-05-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.866.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#28 85 Immediate CVE-2016-1019 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability KEV + ransomware, EPSS 22.3%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS22.3% · 97.7th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#29 84 Urgent CVE-2023-29298 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Improper Access Control Vulnerability KEV, EPSS 99.8%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.8% · 99.96th pctlKEV since2023-07-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#30 84 Urgent CVE-2023-38205 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Improper Access Control Vulnerability KEV, EPSS 99.8%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.8% · 99.95th pctlKEV since2023-07-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#31 84 Urgent CVE-2024-20767 KEV since 2024 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Improper Access Control Vulnerability KEV, EPSS 98.5%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.4 (NVD)EPSS98.5% · 99.92nd pctlKEV since2024-12-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#32 84 Urgent CVE-2011-2462 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability KEV, EPSS 88.9%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS88.9% · 99.78th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.889.

Full CVE pageNVD ↗CISA KEV ↗
#33 83 Urgent CVE-2015-0311 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Remote Code Execution Vulnerability KEV, EPSS 85.6%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS85.6% · 99.72nd pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.856.

Full CVE pageNVD ↗CISA KEV ↗
#34 82 Urgent CVE-2012-0754 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Memory Corruption Vulnerability KEV, EPSS 91.1%

EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.1 (NVD)EPSS91.1% · 99.81st pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.911.

Full CVE pageNVD ↗CISA KEV ↗
#35 82 Urgent CVE-2021-21017 KEV since 2021 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability KEV, EPSS 86.3%

EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS86.3% · 99.73rd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.863.

Full CVE pageNVD ↗CISA KEV ↗
#36 82 Urgent CVE-2015-7645 KEV since 2022 · listed over a yearRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability KEV + ransomware, EPSS 65.3%

EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS65.3% · 99.25th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#37 81 Urgent CVE-2007-5659 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Buffer Overflow Vulnerability KEV, EPSS 87.4%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS87.4% · 99.76th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.874.

Full CVE pageNVD ↗CISA KEV ↗
#38 81 Urgent CVE-2013-0640 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability KEV, EPSS 86.9%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS86.9% · 99.75th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.869.

Full CVE pageNVD ↗CISA KEV ↗
#39 81 Urgent CVE-2009-3953 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability KEV, EPSS 83.2%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS83.2% · 99.68th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.832.

Full CVE pageNVD ↗CISA KEV ↗
#40 81 Urgent CVE-2013-3346 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability KEV, EPSS 78.9%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS78.9% · 99.59th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.789.

Full CVE pageNVD ↗CISA KEV ↗
#41 80 Urgent CVE-2010-1297 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Memory Corruption Vulnerability KEV, EPSS 82.5%

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS82.5% · 99.66th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.825.

Full CVE pageNVD ↗CISA KEV ↗
#42 80 Urgent CVE-2009-4324 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability KEV, EPSS 81.9%

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS81.9% · 99.65th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.819.

Full CVE pageNVD ↗CISA KEV ↗
#43 80 Urgent CVE-2015-3043 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Memory Corruption Vulnerability KEV, EPSS 73.9%

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS73.9% · 99.48th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.739.

Full CVE pageNVD ↗CISA KEV ↗
#44 79 Urgent CVE-2010-2883 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability KEV, EPSS 81.4%

EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.3 (NVD)EPSS81.4% · 99.64th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.814.

Full CVE pageNVD ↗CISA KEV ↗
#45 78 Urgent CVE-2013-2729 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability KEV, EPSS 66.6%

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS66.6% · 99.28th pctlKEV since2022-03-28

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.666.

Full CVE pageNVD ↗CISA KEV ↗
#46 77 Urgent CVE-2012-1535 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability KEV, EPSS 70.4%

EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS70.4% · 99.38th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.704.

Full CVE pageNVD ↗CISA KEV ↗
#47 77 Urgent CVE-2015-8651 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Integer Overflow Vulnerability KEV, EPSS 67.7%

EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS67.7% · 99.31st pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.677.

Full CVE pageNVD ↗CISA KEV ↗
#48 77 Urgent CVE-2018-4939 KEV since 2021 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability KEV, EPSS 62.0%

EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS62.0% · 99.17th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.620.

Full CVE pageNVD ↗CISA KEV ↗
#49 75 Urgent CVE-2013-0631 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Information Disclosure Vulnerability KEV, EPSS 66.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS66.4% · 99.28th pctlKEV since2022-03-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.664.

Full CVE pageNVD ↗CISA KEV ↗
#50 75 Urgent CVE-2013-0629 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability KEV, EPSS 65.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS65.8% · 99.26th pctlKEV since2022-03-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.658.

Full CVE pageNVD ↗CISA KEV ↗
#51 75 Urgent CVE-2011-0609 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Unspecified Vulnerability KEV, EPSS 63.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS63.5% · 99.2nd pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.635.

Full CVE pageNVD ↗CISA KEV ↗
#52 75 Urgent CVE-2023-21608 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability KEV, EPSS 59.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS59.6% · 99.12nd pctlKEV since2023-10-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.596.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#53 75 Urgent CVE-2016-0984 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player and AIR Use-After-Free Vulnerability KEV, EPSS 54.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS54.5% · 99.01st pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.545.

Full CVE pageNVD ↗CISA KEV ↗
#54 75 Urgent CVE-2021-28550 KEV since 2021 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability KEV, EPSS 51.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS51.9% · 98.9th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.519.

Full CVE pageNVD ↗CISA KEV ↗
#55 75 Urgent CVE-2020-9715 CISA federal deadline · Overdue by 6 monthsCISA KEV Adobe — Adobe Acrobat Use-After-Free Vulnerability KEV, EPSS 48.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS48.6% · 98.9th pctlKEV since2026-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.486.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#56 75 Urgent CVE-2026-48282 CISA federal deadline · Overdue by 3 monthsCISA KEV Adobe — Adobe ColdFusion Path Traversal Vulnerability KEV, EPSS 42.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS42.4% · 98.7th pctlKEV since2026-07-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.424.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#57 75 Urgent CVE-2014-0496 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Use-After-Free Vulnerability KEV, EPSS 40.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS40.0% · 98.6th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.400.

Full CVE pageNVD ↗CISA KEV ↗
#58 75 Urgent CVE-2008-0655 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Unspecified Vulnerability KEV, EPSS 37.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS37.9% · 98.5th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.379.

Full CVE pageNVD ↗CISA KEV ↗
#59 75 Urgent CVE-2018-4990 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Double Free Vulnerability KEV, EPSS 36.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS36.2% · 98.5th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.362.

Full CVE pageNVD ↗CISA KEV ↗
#60 75 Urgent CVE-2013-0641 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader Buffer Overflow Vulnerability KEV, EPSS 32.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS32.3% · 98.3rd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.323.

Full CVE pageNVD ↗CISA KEV ↗
#61 75 Urgent CVE-2016-7855 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 25.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS25.2% · 97.9th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.252.

Full CVE pageNVD ↗CISA KEV ↗
#62 75 Urgent CVE-2018-5002 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Stack-based Buffer Overflow Vulnerability KEV, EPSS 25.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS25.1% · 97.9th pctlKEV since2022-05-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.251.

Full CVE pageNVD ↗CISA KEV ↗
#63 75 Urgent CVE-2014-0502 KEV since 2024 · listed over a yearCISA KEV Adobe — Adobe Flash Player Double Free Vulnerablity KEV, EPSS 24.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS24.8% · 97.9th pctlKEV since2024-09-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.248.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#64 75 Urgent CVE-2014-0546 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Reader and Acrobat Sandbox Bypass Vulnerability KEV, EPSS 22.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS22.3% · 97.7th pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.223.

Full CVE pageNVD ↗CISA KEV ↗
#65 75 Urgent CVE-2009-1862 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability KEV, EPSS 21.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS21.2% · 97.6th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.212.

Full CVE pageNVD ↗CISA KEV ↗
#66 75 Urgent CVE-2012-5054 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Integer Overflow Vulnerability KEV, EPSS 21.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS21.2% · 97.6th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.212.

Full CVE pageNVD ↗CISA KEV ↗
#67 75 Urgent CVE-2014-9163 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Stack-Based Buffer Overflow Vulnerability KEV, EPSS 20.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS20.7% · 97.5th pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.207.

Full CVE pageNVD ↗CISA KEV ↗
#68 75 Urgent CVE-2014-8439 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Dereferenced Pointer Vulnerability KEV, EPSS 20.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS20.4% · 97.5th pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.204.

Full CVE pageNVD ↗CISA KEV ↗
#69 75 Urgent CVE-2016-4171 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Remote Code Execution Vulnerability KEV, EPSS 20.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS20.1% · 97.4th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.201.

Full CVE pageNVD ↗CISA KEV ↗
#70 75 Urgent CVE-2016-1010 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player and AIR Integer Overflow Vulnerability KEV, EPSS 19.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS19.3% · 97.3rd pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.193.

Full CVE pageNVD ↗CISA KEV ↗
#71 75 Urgent CVE-2015-5123 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 18.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS18.8% · 97.3rd pctlKEV since2022-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.188.

Full CVE pageNVD ↗CISA KEV ↗
#72 75 Urgent CVE-2016-7892 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability KEV, EPSS 18.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS18.8% · 97.2nd pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.188.

Full CVE pageNVD ↗CISA KEV ↗
#73 75 Urgent CVE-2023-26359 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability KEV, EPSS 17.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS17.0% · 97th pctlKEV since2023-08-21

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.170.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#74 75 Urgent CVE-2015-0310 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player ASLR Bypass Vulnerability KEV, EPSS 15.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS15.1% · 96.7th pctlKEV since2022-05-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.151.

Full CVE pageNVD ↗CISA KEV ↗
#75 75 Urgent CVE-2017-11292 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Type Confusion Vulnerability KEV, EPSS 11.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS11.9% · 96.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.119.

Full CVE pageNVD ↗CISA KEV ↗
#76 75 Urgent CVE-2013-0648 KEV since 2024 · listed over a yearCISA KEV Adobe — Adobe Flash Player Code Execution Vulnerability KEV, EPSS 11.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS11.1% · 95.9th pctlKEV since2024-09-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.111.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#77 75 Urgent CVE-2013-0643 KEV since 2024 · listed over a yearCISA KEV Adobe — Adobe Flash Player Incorrect Default Permissions Vulnerability KEV, EPSS 10.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS10.5% · 95.7th pctlKEV since2024-09-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.105.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#78 75 Urgent CVE-2012-2034 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Memory Corruption Vulnerability KEV, EPSS 7.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.7% · 94.5th pctlKEV since2022-03-28

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.077.

Full CVE pageNVD ↗CISA KEV ↗
#79 75 Urgent CVE-2023-26369 KEV since 2023 · listed over a yearCISA KEV Adobe — Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability KEV, EPSS 6.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS6.7% · 93.9th pctlKEV since2023-09-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.067.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#80 75 Urgent CVE-2012-0767 KEV since 2022 · listed over a yearCISA KEV Adobe — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 6.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.1 (NVD)EPSS6.2% · 93.4th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.062.

Full CVE pageNVD ↗CISA KEV ↗
#81 75 Urgent CVE-2026-75650 CISA federal deadline · Overdue by 36 daysCISA KEV Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability KEV, EPSS 3.9%, added to KEV within the last 90 days

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS3.9% · 90.3rd pctlKEV since2026-09-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.039.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#82 75 Urgent CVE-2026-34621 CISA federal deadline · Overdue by 6 monthsCISA KEV Adobe — Adobe Acrobat and Reader Prototype Pollution Vulnerability KEV, EPSS 2.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS2.2% · 82.1st pctlKEV since2026-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.022.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗