CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,156 as of 2026-11-06, highest first.

CVE-2017-11840ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an…ChakraCore, Microsoft EdgeUnratedEPSS 59.6%Nov 15, 2017
CVE-2017-11841ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an…ChakraCore, Microsoft EdgeUnratedEPSS 59.6%Nov 15, 2017
CVE-2017-11870ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights…ChakraCore, Microsoft Edge · Microsoft.ChakraCoreUnratedEPSS 59.6%Fix availableNov 15, 2017
CVE-2021-27030A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in…Autodesk FBX ReviewUnratedEPSS 59.6%Apr 19, 2021
CVE-2009-0563Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open High · 7.8KEVEPSS 59.6%Jun 10, 2009
CVE-2011-4317The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision…UnratedEPSS 59.6%Nov 30, 2011
CVE-2017-11774Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how MicrosMicrosoft OutlookHigh · 7.8KEVEPSS 59.6%Oct 13, 2017
CVE-2014-8424ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.UnratedEPSS 59.6%Nov 28, 2014
CVE-2006-2212Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or…UnratedEPSS 59.6%May 5, 2006
CVE-2023-38124Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution VulnerabilityInductive Automation IgnitionHigh · 7.2EPSS 59.6%May 3, 2024
CVE-2023-0587A file upload vulnerability in exists in Trend Micro Apex One server build 11110.Trend Micro Apex OneCritical · 9.1EPSS 59.6%Feb 1, 2023
CVE-2007-1868The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle…UnratedEPSS 59.6%Apr 4, 2007
CVE-2012-4333Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls…UnratedEPSS 59.6%Aug 14, 2012
CVE-2022-29273pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.UnratedEPSS 59.6%Feb 22, 2023
CVE-2023-5044Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotationKubernetes ingress-nginx · k8s.io/ingress-nginxHigh · 7.6EPSS 59.6%Fix availableOct 25, 2023
CVE-2013-5880Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and…UnratedEPSS 59.6%Jan 15, 2014
CVE-2019-9511Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a…High · 7.5EPSS 59.5%Aug 13, 2019
CVE-2005-0768Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows…UnratedEPSS 59.5%Mar 18, 2005
CVE-2006-5854Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to…UnratedEPSS 59.5%Dec 3, 2006
CVE-2006-0988The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on…UnratedEPSS 59.5%Mar 3, 2006
CVE-2013-5795Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server…UnratedEPSS 59.5%Jan 15, 2014
CVE-2021-20078Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in…Manage Engine OpManagerUnratedEPSS 59.5%Apr 1, 2021
CVE-2022-48343In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.JetBrains TeamCityMedium · 5.4EPSS 59.5%Fix availableFeb 23, 2023
CVE-2021-42342An issue was discovered in GoAhead 4.x and 5.x before 5.1.5.UnratedEPSS 59.5%Oct 14, 2021
CVE-2007-3813PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute…UnratedEPSS 59.4%Jul 17, 2007
CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat ReaderHigh · 7.8KEVEPSS 59.4%Jan 18, 2023
CVE-2021-33742Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft WindowsHigh · 7.5KEVEPSS 59.4%Fix availableJun 8, 2021
CVE-2022-47075An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name…High · 7.5EPSS 59.4%Feb 28, 2023
CVE-2005-1206Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows…UnratedEPSS 59.4%Jun 15, 2005
CVE-2017-16249The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the…UnratedEPSS 59.4%Nov 9, 2017

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions