CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,160 as of 2026-11-07, highest first.

CVE-2005-1218The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a…UnratedEPSS 57.3%Aug 10, 2005
CVE-2019-12815An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure…UnratedEPSS 57.3%Jul 19, 2019
CVE-2017-8620Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows…Microsoft Windows Search ComponentUnratedEPSS 57.3%Aug 8, 2017
CVE-2020-15922There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with…UnratedEPSS 57.3%Jul 24, 2020
CVE-2017-3731Truncated packet could crash via OOB readOpenSSLUnratedEPSS 57.3%May 4, 2017
CVE-2006-3440Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute…UnratedEPSS 57.3%Aug 9, 2006
CVE-2025-48828Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine.vBulletinCritical · 9.0EPSS 57.3%May 27, 2025
CVE-2017-16597This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager…NetGain Systems Enterprise ManagerUnratedEPSS 57.3%Jan 23, 2018
CVE-2018-8239An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Microsoft Windows Server · Microsoft WindowsUnratedEPSS 57.3%Jun 14, 2018
CVE-2006-4364Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a…UnratedEPSS 57.3%Aug 25, 2006
CVE-2019-1068A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'MicrMicrosoft SQL Server 2014 Service Pack 2 for 32-bit Systems…High · 8.8KEVEPSS 57.3%Jul 15, 2019
CVE-2007-1579Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command.UnratedEPSS 57.3%Mar 21, 2007
CVE-2010-1899Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows…UnratedEPSS 57.2%Sep 15, 2010
CVE-2022-30780Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because…UnratedEPSS 57.2%Jun 11, 2022
CVE-2016-0100Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted…UnratedEPSS 57.2%Mar 9, 2016
CVE-2008-0075Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary…UnratedEPSS 57.2%Feb 12, 2008
CVE-2019-5029An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1.ExhibitorCritical · 9.8EPSS 57.1%Nov 13, 2019
CVE-2012-6441Rockwell Automation ControlLogix PLC Information ExposureRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6UnratedEPSS 57.1%Jan 24, 2013
CVE-2008-0532Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control…UnratedEPSS 57.1%Mar 14, 2008
CVE-2019-15605HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformedNodeJS NodeUnratedEPSS 57.1%Fix availableFeb 7, 2020
CVE-2023-23492The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID'…Login with Phone Number WordPress PluginHigh · 8.8EPSS 57.1%Fix availableJan 20, 2023
CVE-2013-3632The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute…High · 8.8EPSS 57.1%Sep 29, 2014
CVE-2023-36744Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…High · 8.0EPSS 57.1%Fix availableSep 12, 2023
CVE-2008-0027Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager…UnratedEPSS 57.1%Jan 17, 2008
CVE-2011-3497service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function…UnratedEPSS 57.1%Sep 16, 2011
CVE-2008-1358Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary…UnratedEPSS 57.1%Mar 17, 2008
CVE-2023-27293Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the…OpenCATSMedium · 6.1EPSS 57.0%Feb 28, 2023
CVE-2015-5259Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to…UnratedEPSS 57.0%Jan 8, 2016
CVE-2019-5434An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what"…Revive AdserverUnratedEPSS 57.0%May 6, 2019
CVE-2005-1009Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer…UnratedEPSS 57.0%Apr 8, 2005

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions