Patch first, page 16
As of , all 1,734 vulnerabilities on CISA's list of exploited vulnerabilities, in our patch-first order: 101 to patch now.
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1501 | CVE-2023-43000Use-After-Free | Apple Multiple Products | Patch soon | 0.04 | ||
| 1502 | CVE-2026-21533Improper Privilege Management | Microsoft Windows | Patch soon | 0.04 | ||
| 1503 | CVE-2025-27915Cross-site Scripting | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.04 | ||
| 1504 | CVE-2025-55177Incorrect Authorization | Meta Platforms WhatsApp | Patch soon | 0.04 | ||
| 1505 | CVE-2025-48384Link Following | Git Git | Patch soon | 0.04 | ||
| 1506 | CVE-2021-20035OS Command Injection | SonicWall SMA100 Appliances | Patch soon | 0.04 | ||
| 1507 | CVE-2024-53197Out-of-Bounds Access | Linux Kernel | Patch soon | 0.04 | ||
| 1508 | CVE-2025-24985Fast FAT File System Driver Integer Overflow | Microsoft Windows | Patch soon | 0.04 | ||
| 1509 | CVE-2024-20953Deserialization | Oracle Agile Product Lifecycle Management (PLM) | Patch soon | 0.04 | ||
| 1510 | CVE-2024-39717Dangerous File Type Upload | Versa Director | Patch soon | 0.04 | ||
| 1511 | CVE-2024-20399Command Injection | Cisco NX-OS | Patch soon | 0.04 | ||
| 1512 | CVE-2024-30040MSHTML Platform Security Feature Bypass | Microsoft Windows | Patch soon | 0.04 | ||
| 1513 | CVE-2023-41179Remote Code Execution | Trend Micro Apex One and Worry-Free Business Security | Patch soon | 0.04 | ||
| 1514 | CVE-2023-32049Defender SmartScreen Security Feature Bypass | Microsoft Windows | Patch soon | 0.04 | ||
| 1515 | CVE-2015-1769Mount Manager Privilege Escalation | Microsoft Windows | Patch soon | 0.04 | ||
| 1516 | CVE-2018-8611Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.04 | ||
| 1517 | CVE-2019-7483Directory Traversal | SonicWall SMA100 | Patch soon | 0.04 | ||
| 1518 | CVE-2018-0161Resource Management Errors | Cisco IOS Software | Patch soon | 0.04 | ||
| 1519 | CVE-2021-30869Type Confusion | Apple iOS, iPadOS, and macOS | Patch soon | 0.04 | ||
| 1520 | CVE-2026-85880Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.04 | ||
| 1521 | CVE-2025-24201WebKit Out-of-Bounds Write | Apple Multiple Products | Patch soon | 0.04 | ||
| 1522 | CVE-2024-9537Unspecified | ScienceLogic SL1 | Patch soon | 0.04 | ||
| 1523 | CVE-2024-0519Out-of-Bounds Memory Access | Google Chromium V8 | Patch soon | 0.04 | ||
| 1524 | CVE-2023-0266Use-After-Free | Linux Kernel | Patch soon | 0.04 | ||
| 1525 | CVE-2021-31010Sandbox Bypass | Apple iOS, macOS, watchOS | Patch soon | 0.04 | ||
| 1526 | CVE-2016-85621543-1 Improper Privilege Management | Siemens SIMATIC CP | Patch soon | 0.04 | ||
| 1527 | CVE-2016-3643Privilege Escalation | SolarWinds Virtualization Manager | Patch soon | 0.04 | ||
| 1528 | CVE-2020-3566Software DVMRP Memory Exhaustion | Cisco IOS XR | Patch soon | 0.04 | ||
| 1529 | CVE-2021-30665WebKit Memory Corruption | Apple Multiple Products | Patch soon | 0.04 | ||
| 1530 | CVE-2025-66644OS Command Injection | Array Networks ArrayOS AG | Patch soon | 0.03 | ||
| 1531 | CVE-2024-8068Improper Privilege Management | Citrix Session Recording | Patch soon | 0.03 | ||
| 1532 | CVE-2025-8876Command Injection | N-able N-Central | Patch soon | 0.03 | ||
| 1533 | CVE-2025-3935Improper Authentication | ConnectWise ScreenConnect | Patch soon | 0.04 | ||
| 1534 | CVE-2025-42599Stack-Based Buffer Overflow | Qualitia Active! Mail | Patch soon | 0.03 | ||
| 1535 | CVE-2024-53104Out-of-Bounds Write | Linux Kernel | Patch soon | 0.03 | ||
| 1536 | CVE-2023-45727Improper Restriction of XML External Entity (XXE) Reference | North Grid Proself | Patch soon | 0.04 | ||
| 1537 | CVE-2022-40139Improper Validation | Trend Micro Apex One and Apex One as a Service | Patch soon | 0.03 | ||
| 1538 | CVE-2022-32894Out-of-Bounds Write | Apple iOS and macOS | Patch soon | 0.03 | ||
| 1539 | CVE-2009-2055Border Gateway Protocol (BGP) Denial-of-Service | Cisco IOS XR | Patch soon | 0.03 | ||
| 1540 | CVE-2018-0167Buffer Overflow | Cisco IOS, XR, and XE Software | Patch soon | 0.03 | ||
| 1541 | CVE-2018-0175Buffer Overflow | Cisco IOS, XR, and XE Software | Patch soon | 0.03 | ||
| 1542 | CVE-2021-35247Improper Input Validation | SolarWinds Serv-U | Patch soon | 0.03 | ||
| 1543 | CVE-2020-3569Software DVMRP Memory Exhaustion | Cisco IOS XR | Patch soon | 0.03 | ||
| 1544 | CVE-2021-30663WebKit Integer Overflow | Apple Multiple Products | Patch soon | 0.04 | ||
| 1545 | CVE-2026-87491Out of Bounds Write | Google Chromium V8 | Patch soon | 0.03 | ||
| 1546 | CVE-2022-48503Unspecified | Apple Multiple Products | Patch soon | 0.03 | ||
| 1547 | CVE-2023-6548Code Injection | Citrix NetScaler ADC and NetScaler Gateway | Patch soon | 0.03 | ||
| 1548 | CVE-2023-36584Mark of the Web (MOTW) Security Feature Bypass | Microsoft Windows | Patch soon | 0.03 | ||
| 1549 | CVE-2022-41125CNG Key Isolation Service Privilege Escalation | Microsoft Windows | Patch soon | 0.03 | ||
| 1550 | CVE-2013-2596Integer Overflow | Linux Kernel | Patch soon | 0.03 | ||
| 1551 | CVE-2011-4723Cleartext Storage of a Password | D-Link DIR-300 Router | Patch soon | 0.03 | ||
| 1552 | CVE-2020-9907Memory Corruption | Apple Multiple Products | Patch soon | 0.03 | ||
| 1553 | CVE-2018-8589Privilege Escalation | Microsoft Win32k | Patch soon | 0.03 | ||
| 1554 | CVE-2017-0001Privilege Escalation | Microsoft Graphics Device Interface (GDI) | Patch soon | 0.03 | ||
| 1555 | CVE-2020-0041Out-of-Bounds Write | Android Android Kernel | Patch soon | 0.03 | ||
| 1556 | CVE-2020-6819Use-After-Free | Mozilla Firefox and Thunderbird | Patch soon | 0.03 | ||
| 1557 | CVE-2021-27562Out-of-Bounds Write | Arm Trusted Firmware | Patch soon | 0.03 | ||
| 1558 | CVE-2024-7262Path Traversal | Kingsoft WPS Office | Patch soon | 0.03 | ||
| 1559 | CVE-2024-32896Privilege Escalation | Android Pixel | Patch soon | 0.03 | ||
| 1560 | CVE-2023-38606Kernel Unspecified | Apple Multiple Products | Patch soon | 0.03 | ||
| 1561 | CVE-2021-29256Mali GPU Kernel Driver Use-After-Free | Arm Mali Graphics Processing Unit (GPU) | Patch soon | 0.03 | ||
| 1562 | CVE-2021-25337Improper Access Control | Samsung Mobile Devices | Patch soon | 0.03 | ||
| 1563 | CVE-2021-30983Buffer Overflow | Apple iOS and iPadOS | Patch soon | 0.03 | ||
| 1564 | CVE-2021-30666WebKit Buffer Overflow | Apple iOS | Patch soon | 0.03 | ||
| 1565 | CVE-2021-31199Privilege Escalation | Microsoft Enhanced Cryptographic Provider | Patch soon | 0.03 | ||
| 1566 | CVE-2021-38649Privilege Escalation | Microsoft Open Management Infrastructure (OMI) | Patch soon | 0.03 | ||
| 1567 | CVE-2025-40602SMA1000 Missing Authorization | SonicWall SMA1000 appliance | Patch soon | 0.03 | ||
| 1568 | CVE-2025-61932Improper Verification of Source of a Communication Channel | Motex LANSCOPE Endpoint Manager | Patch soon | 0.03 | ||
| 1569 | CVE-2025-59230Improper Access Control | Microsoft Windows | Patch soon | 0.03 | ||
| 1570 | CVE-2024-38226Protection Mechanism Failure | Microsoft Publisher | Patch soon | 0.03 | ||
| 1571 | CVE-2024-36971Remote Code Execution | Android Kernel | Patch soon | 0.03 | ||
| 1572 | CVE-2023-29492Insecure Deserialization | Novi Survey Novi Survey | Patch soon | 0.03 | ||
| 1573 | CVE-2022-42948User Interface Remote Code Execution | Fortra Cobalt Strike | Patch soon | 0.03 | ||
| 1574 | CVE-2019-6223Group Facetime | Apple iOS and macOS | Patch soon | 0.03 | ||
| 1575 | CVE-2020-16013Incorrect Implementation Vulnerabililty | Google Chromium V8 | Patch soon | 0.03 | ||
| 1576 | CVE-2020-16017Use-After-Free | Google Chrome | Patch soon | 0.03 | ||
| 1577 | CVE-2020-24557Multiple Products Improper Access Control | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security | Patch soon | 0.03 | ||
| 1578 | CVE-2021-38645Privilege Escalation | Microsoft Open Management Infrastructure (OMI) | Patch soon | 0.03 | ||
| 1579 | CVE-2026-6973Improper Input Validation | Ivanti Endpoint Manager Mobile (EPMM) | Patch soon | 0.03 | ||
| 1580 | CVE-2025-32975Improper Authentication | Quest KACE Systems Management Appliance (SMA) | Patch soon | 0.02 | ||
| 1581 | CVE-2025-62221Use After Free | Microsoft Windows | Patch soon | 0.03 | ||
| 1582 | CVE-2023-20109Group Encrypted Transport VPN Out-of-Bounds Write | Cisco IOS and IOS XE | Patch soon | 0.02 | ||
| 1583 | CVE-2023-35674Privilege Escalation | Android Framework | Patch soon | 0.03 | ||
| 1584 | CVE-2023-21492Insertion of Sensitive Information Into Log File | Samsung Mobile Devices | Patch soon | 0.03 | ||
| 1585 | CVE-2022-41049Mark of the Web (MOTW) Security Feature Bypass | Microsoft Windows | Patch soon | 0.02 | ||
| 1586 | CVE-2022-0028Reflected Amplification Denial-of-Service | Palo Alto Networks PAN-OS | Patch soon | 0.03 | ||
| 1587 | CVE-2021-31201Privilege Escalation | Microsoft Enhanced Cryptographic Provider | Patch soon | 0.03 | ||
| 1588 | CVE-2026-11645Out-of-Bounds Read and Write | Google Chromium V8 | Patch soon | 0.02 | ||
| 1589 | CVE-2026-21519Type Confusion | Microsoft Windows | Patch soon | 0.02 | ||
| 1590 | CVE-2025-30154reviewdog/action-setup GitHub Action Embedded Malicious Code | reviewdog action-setup GitHub Action | Patch soon | 0.02 | ||
| 1591 | CVE-2018-4344Memory Corruption | Apple Multiple Products | Patch soon | 0.02 | ||
| 1592 | CVE-2022-21919User Profile Service Privilege Escalation | Microsoft Windows | Patch soon | 0.02 | ||
| 1593 | CVE-2022-26486Use-After-Free | Mozilla Firefox | Patch soon | 0.02 | ||
| 1594 | CVE-2025-53521Stack-Based Buffer Overflow | F5 BIG-IP | Patch soon | 0.02 | ||
| 1595 | CVE-2026-3909Out-of-Bounds Write | Google Skia | Patch soon | 0.02 | ||
| 1596 | CVE-2025-32706Common Log File System (CLFS) Driver Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.02 | ||
| 1597 | CVE-2025-3928Unspecified | Commvault Web Server | Patch soon | 0.02 | ||
| 1598 | CVE-2025-24993NTFS Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.02 | ||
| 1599 | CVE-2025-21391Storage Link Following | Microsoft Windows | Patch soon | 0.02 | ||
| 1600 | CVE-2019-0880Privilege Escalation | Microsoft Windows | Patch soon | 0.02 |