CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,160 as of 2026-11-07, highest first.

CVE-2011-0978Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office…UnratedEPSS 42.6%Feb 10, 2011
CVE-2019-12987Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).UnratedEPSS 42.6%Jul 16, 2019
CVE-2019-12988Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).UnratedEPSS 42.6%Jul 16, 2019
CVE-2023-2986Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypasstychesoftwares Abandoned Cart Lite for WooCommerceCritical · 9.8EPSS 42.5%Jun 8, 2023
CVE-2009-2477js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote…UnratedEPSS 42.5%Jul 15, 2009
CVE-2023-41887Remote Code exec in project import with mysql jdbc url attackOpenRefine · org.openrefine:databaseCritical · 9.8EPSS 42.5%Fix availableSep 15, 2023
CVE-2015-0292Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za…UnratedEPSS 42.5%Mar 19, 2015
CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic lMicrosoft WindowsHigh · 7.8KEVEPSS 42.5%Mar 12, 2020
CVE-2015-3082Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe…UnratedEPSS 42.5%May 13, 2015
CVE-2021-21672Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.Jenkins project Jenkins Selenium HTML report Plugin · org.j…UnratedEPSS 42.5%Fix availableJun 30, 2021
CVE-2025-4380Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusionscripteo Ads Pro Plugin - Multi-Purpose WordPress Advertisi…High · 8.1EPSS 42.5%Jul 2, 2025
CVE-2022-25765Command InjectionpdfkitHigh · 7.3EPSS 42.5%Fix availableSep 9, 2022
CVE-2023-43654TorchServe Server-Side Request Forgerypytorch serve · torchserveCritical · 10.0EPSS 42.5%Fix availableSep 28, 2023
CVE-2012-2386Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows…UnratedEPSS 42.5%Jul 7, 2012
CVE-2011-1975Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft…UnratedEPSS 42.5%Aug 10, 2011
CVE-2012-0419Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack…UnratedEPSS 42.5%Sep 28, 2012
CVE-2019-13132In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq…UnratedEPSS 42.5%Jul 10, 2019
CVE-2025-1128Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletionwpeverest Everest Forms – Contact Form, Payment Form, Quiz,…Critical · 9.8EPSS 42.4%Feb 25, 2025
CVE-2024-21644pyLoad unauthenticated flask configuration leakagepyload · pyload-ngHigh · 7.5EPSS 42.4%Fix availableJan 8, 2024
CVE-2021-26912NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because…UnratedEPSS 42.4%Feb 8, 2021
CVE-2007-2340Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to execute arbitrary…UnratedEPSS 42.4%Apr 27, 2007
CVE-2018-11139The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any…UnratedEPSS 42.4%May 31, 2018
CVE-2016-7478Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service…PHP beforeUnratedEPSS 42.4%Jan 11, 2017
CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusionCritical · 10.0KEVEPSS 42.4%Jun 30, 2026
CVE-2025-68615Net-SNMP snmptrapd crashnet-snmpCritical · 9.8EPSS 42.4%Fix availableDec 22, 2025
CVE-2004-0573Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004…UnratedEPSS 42.3%Sep 17, 2004
CVE-2009-2494The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server…Critical · 9.8EPSS 42.3%Aug 12, 2009
CVE-2020-26950In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free…Mozilla Firefox · Mozilla ThunderbirdUnratedEPSS 42.3%Fix availableDec 9, 2020
CVE-2018-25031Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks.swagger-ui · org.webjars:swagger-uiMedium · 4.3EPSS 42.3%Fix availableMar 11, 2022
CVE-2014-1649The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a…UnratedEPSS 42.3%May 16, 2014

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions