← Back to feed 2026-09-18
14,649
Total vulnerabilities (30 days)
927
Critical severity
10
Actively exploited (CISA KEV)
1531
High EPSS (>50th %ile)

By severity

CRITICAL
927
HIGH
5,510
MEDIUM
4,031
LOW
556
UNKNOWN
3,623

By source

Microsoft
9,272
NVD
5,164
OpenStack
74
Fortinet
47
OSS-Security
22
GitHub
21
Debian
14
Ubuntu
10
OSV
9
Arista
7
CISA-KEV
4
Red Hat
3
Featured
2

CVSS score distribution

0.0–0.5
2
0.5–1.0
8
1.0–1.5
6
1.5–2.0
64
2.0–2.5
163
2.5–3.0
86
3.0–3.5
124
3.5–4.0
104
4.0–4.5
380
4.5–5.0
283
5.0–5.5
561
5.5–6.0
1,650
6.0–6.5
349
6.5–7.0
806
7.0–7.5
1,403
7.5–8.0
2,381
8.0–8.5
701
8.5–9.0
1,016
9.0–9.5
291
9.5–10.0
634

Daily severity heatmap

Low
Critical  
No data

Top affected products / packages

ProductCVEsMax CVSSWorst severity
Windows151209.9CRITICAL
Microsoft690510.0CRITICAL
azl3573110.0CRITICAL
cbl2108710.0CRITICAL
apple/macos20910.0CRITICAL
.NET1998.8HIGH
apple/ipados1239.8CRITICAL
apple/iphone_os1239.8CRITICAL
Azure11510.0CRITICAL
Office898.8HIGH
apple/visionos869.8CRITICAL
CBL869.8CRITICAL
apple/watchos749.8CRITICAL
apple/tvos699.8CRITICAL
google/chrome469.6CRITICAL
cm1418.8HIGH
Visual409.6CRITICAL
Internet397.5HIGH
google/android388.8HIGH
Skype329.8CRITICAL
Raw248.8HIGH
PowerShell198.8HIGH
HEVC167.8HIGH
concretecms/concrete_cms158.5HIGH
ChakraCore154.2MEDIUM
Remote128.8HIGH
gnu/binutils111.9LOW
Web108.8HIGH
Nuance89.8CRITICAL
apple/safari78.8HIGH

Highest EPSS scores (top 20)

CVE IDTitleEPSS %ileCVSSSeverity
CVE-2024-4577Argument Injection in PHP-CGI100.0%9.8CRITICAL
CVE-2023-21554Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability99.9%9.8CRITICAL
CVE-2015-0204OSSN-0045: = Vulnerable clients allow a TLS protocol downgrade (FREAK)=99.9%UNKNOWN
CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb frags99.8%7.8HIGH
CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present99.8%7.8HIGH
CVE-2023-21769Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability99.8%7.5HIGH
CVE-2023-28302Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability99.8%7.5HIGH
CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability99.7%9.8CRITICAL
CVE-2017-14491OSSN-0082: = Heap and Stack based buffer overflows in dnsmasq prior to version 299.7%UNKNOWN
CVE-2026-41089Windows Netlogon Remote Code Execution Vulnerability99.6%9.8CRITICAL
CVE-2023-50868MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU99.6%7.5HIGH
CVE-2017-11826Microsoft Office Remote Code Execution Vulnerability99.6%UNKNOWN
CVE-2026-45659Microsoft SharePoint Remote Code Execution Vulnerability99.5%8.8HIGH
CVE-2026-42897Microsoft Exchange Server Spoofing Vulnerability99.4%8.1HIGH
CVE-2026-21509Microsoft Office Security Feature Bypass Vulnerability99.4%7.8HIGH
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerability99.3%8.1HIGH
CVE-2024-30088Windows Kernel Elevation of Privilege Vulnerability99.3%7.0HIGH
CVE-2017-11802Scripting Engine Memory Corruption Vulnerability99.3%4.2MEDIUM
CVE-2017-11809Scripting Engine Memory Corruption Vulnerability99.3%4.2MEDIUM
CVE-2017-11771Windows Search Remote Code Execution Vulnerability99.2%8.1HIGH