CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,160 as of 2026-11-07, highest first.

CVE-2010-2115SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.UnratedEPSS 56.0%May 28, 2010
CVE-2015-1833XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6…org.apache.jackrabbit:jackrabbit-coreUnratedEPSS 55.9%Fix availableMay 29, 2015
CVE-2019-5825Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption viGoogle ChromeMedium · 6.5KEVEPSS 55.9%Fix availableNov 25, 2019
CVE-2015-1701Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privilHigh · 7.8KEVEPSS 55.9%Apr 21, 2015
CVE-2006-3280Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains…UnratedEPSS 55.9%Jun 28, 2006
CVE-2008-3704Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in…UnratedEPSS 55.9%Aug 18, 2008
CVE-2008-3008Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows…UnratedEPSS 55.9%Sep 10, 2008
CVE-2015-8000db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE…UnratedEPSS 55.9%Dec 16, 2015
CVE-2017-8635Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…Microsoft Scripting EngineUnratedEPSS 55.9%Aug 8, 2017
CVE-2019-11708Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxeMozilla Firefox ESR · Mozilla Firefox +1Critical · 10.0KEVEPSS 55.9%Fix availableJul 23, 2019
CVE-2025-34509Sitecore XM and XP Hardcoded CredentialsSitecore Experience Manager · Sitecore Experience PlatformHigh · 7.5EPSS 55.9%Fix availableJun 17, 2025
CVE-2019-18371An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.UnratedEPSS 55.9%Oct 23, 2019
CVE-2025-26319FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.flowiseCritical · 9.8EPSS 55.9%Mar 4, 2025
CVE-2018-19206steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY…UnratedEPSS 55.9%Nov 12, 2018
CVE-2019-14322In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.werkzeugUnratedEPSS 55.8%Fix availableJul 28, 2019
CVE-2023-21742Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1High · 8.8EPSS 55.8%Fix availableJan 10, 2023
CVE-2011-3494WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary…UnratedEPSS 55.8%Sep 16, 2011
CVE-2015-1397SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE)…UnratedEPSS 55.8%Apr 29, 2015
CVE-2011-4908TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.Joomla! TinyBrowser PluginUnratedEPSS 55.8%Feb 12, 2020
CVE-2013-0025Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site…UnratedEPSS 55.8%Feb 13, 2013
CVE-2020-29557An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20.Critical · 9.8KEVEPSS 55.7%Jan 29, 2021
CVE-2019-7111Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and…Adobe Acrobat and ReaderUnratedEPSS 55.7%May 23, 2019
CVE-2016-5387The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of…UnratedEPSS 55.7%Jul 19, 2016
CVE-2019-8387MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.UnratedEPSS 55.7%May 8, 2019
CVE-2016-6602ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to…UnratedEPSS 55.7%Jan 23, 2017
CVE-2005-2124Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related…UnratedEPSS 55.7%Nov 29, 2005
CVE-2021-21745ZTE MF971R product has a Referer authentication bypass vulnerability.MF971RUnratedEPSS 55.7%Oct 20, 2021
CVE-2018-8006An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp…Apache Software Foundation Apache ActiveMQ · org.apache.act…UnratedEPSS 55.7%Fix availableOct 10, 2018
CVE-2018-1612IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive…IBM QRadar SIEMMedium · 5.8EPSS 55.7%Jul 17, 2018
CVE-2019-7255Linear eMerge E3-Series devices allow XSS.UnratedEPSS 55.7%Jul 2, 2019

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions