CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,160 as of 2026-11-08, highest first.

CVE-2018-11529VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via…UnratedEPSS 40.5%Jul 11, 2018
CVE-2005-2128QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a…UnratedEPSS 40.5%Oct 11, 2005
CVE-2016-7274Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…UnratedEPSS 40.5%Dec 20, 2016
CVE-2013-3185Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1…UnratedEPSS 40.5%Aug 14, 2013
CVE-2013-1412DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which…UnratedEPSS 40.5%Jun 2, 2014
CVE-2011-0517Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers…UnratedEPSS 40.5%Jan 20, 2011
CVE-2025-31486Vite allows server.fs.deny to be bypassed with .svg or relative pathsvitejs vite · viteMedium · 5.3EPSS 40.5%Fix availableApr 3, 2025
CVE-2024-1601SQL Injection in parisneo/lollms-webuiparisneo/lollms-webuiHigh · 7.5EPSS 40.4%Fix availableApr 16, 2024
CVE-2015-3118Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and…UnratedEPSS 40.4%Jul 9, 2015
CVE-2020-9590Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability.Adobe DNG Software Development KitUnratedEPSS 40.4%Jun 26, 2020
CVE-2006-3493Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in…UnratedEPSS 40.4%Jul 10, 2006
CVE-2015-0666Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attaHigh · 7.5KEVEPSS 40.4%Apr 3, 2015
CVE-2024-46906WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation VulnerabilityProgress Software WhatsUp GoldHigh · 8.8EPSS 40.4%Fix availableDec 2, 2024
CVE-2014-0980Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.UnratedEPSS 40.4%Feb 11, 2014
CVE-2013-1599A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02…UnratedEPSS 40.4%Jan 28, 2020
CVE-2003-0715Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to…UnratedEPSS 40.3%Sep 12, 2003
CVE-2009-3295The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT…UnratedEPSS 40.3%Dec 29, 2009
CVE-2013-0136Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote…UnratedEPSS 40.3%Jun 1, 2013
CVE-2005-1665The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of…UnratedEPSS 40.3%May 18, 2005
CVE-2014-0198The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a…UnratedEPSS 40.3%May 6, 2014
CVE-2007-4475Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote…UnratedEPSS 40.3%Apr 1, 2009
CVE-2020-24217An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.UnratedEPSS 40.3%Oct 6, 2020
CVE-2006-2383Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code…UnratedEPSS 40.3%Jun 13, 2006
CVE-2019-18370An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.UnratedEPSS 40.3%Oct 23, 2019
CVE-2025-61675FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parametersFreePBX endpointHigh · 8.6EPSS 40.3%Fix availableOct 14, 2025
CVE-2024-50330SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote…Ivanti Endpoint ManagerCritical · 9.8EPSS 40.3%Nov 12, 2024
CVE-2008-1472Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve…UnratedEPSS 40.3%Mar 24, 2008
CVE-2019-10945An issue was discovered in Joomla! before 3.9.5.UnratedEPSS 40.3%Apr 10, 2019
CVE-2011-0567AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote…UnratedEPSS 40.3%Feb 10, 2011
CVE-2005-2852Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service…UnratedEPSS 40.3%Sep 8, 2005

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions