CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,162 as of 2026-11-09, highest first.

CVE-2016-3277Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site…UnratedEPSS 32.2%Jul 13, 2016
CVE-2008-3004Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not…UnratedEPSS 32.2%Aug 12, 2008
CVE-2008-3460WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of…UnratedEPSS 32.2%Aug 12, 2008
CVE-2011-0977Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File…UnratedEPSS 32.2%Feb 10, 2011
CVE-2009-0554Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows…High · 8.8EPSS 32.2%Apr 15, 2009
CVE-2009-1568Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers…UnratedEPSS 32.2%Dec 8, 2009
CVE-2014-8602iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of…UnratedEPSS 32.2%Dec 11, 2014
CVE-2017-7692SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file…UnratedEPSS 32.2%Apr 20, 2017
CVE-1999-0524ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.Medium · 4.0EPSS 32.2%Feb 4, 2000
CVE-2018-8423A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code…Microsoft WindowsUnratedEPSS 32.2%Oct 10, 2018
CVE-2008-2244Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as…UnratedEPSS 32.1%Jul 9, 2008
CVE-2019-6848A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication…Modicon M580 CPU (BMEx58*) and Modicon M580 communication m…UnratedEPSS 32.1%Oct 29, 2019
CVE-1999-0270Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool…UnratedEPSS 32.1%Jan 18, 2000
CVE-2020-10549rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.UnratedEPSS 32.1%Jun 4, 2020
CVE-2024-47949In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary locationJetBrains TeamCityMedium · 4.9EPSS 32.1%Fix availableOct 8, 2024
CVE-2008-1089Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to…UnratedEPSS 32.1%Apr 8, 2008
CVE-2008-1090Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to…UnratedEPSS 32.1%Apr 8, 2008
CVE-2009-0081The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2…UnratedEPSS 32.1%Mar 10, 2009
CVE-2013-0005The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and…UnratedEPSS 32.1%Jan 9, 2013
CVE-2020-7357Cayin CMS Command InjectionCayin Technology Cayin CMS-SE · Cayin Technology Cayin C… +3Critical · 9.6EPSS 32.1%Aug 6, 2020
CVE-2022-0332A flaw was found in Moodle in versions 3.11 to 3.11.4.moodle · moodle/moodleUnratedEPSS 32.1%Fix availableJan 25, 2022
CVE-2007-0035Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly…UnratedEPSS 32.1%May 8, 2007
CVE-2018-15534Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and…UnratedEPSS 32.1%Aug 21, 2018
CVE-2024-0778Uniview ISC 2500-S VM.php setNatConfig os command injectionUniview ISC 2500-SHigh · 8.0EPSS 32.1%Jan 22, 2024
CVE-2009-3837Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.UnratedEPSS 32.1%Nov 2, 2009
CVE-2013-3178Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or…UnratedEPSS 32.1%Jul 10, 2013
CVE-2017-5070Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attaGoogle Chrome prior to 59.0.3071.86 for Linux, Windows and…High · 8.8KEVEPSS 32.1%Oct 27, 2017
CVE-2008-2246Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a…UnratedEPSS 32.1%Aug 13, 2008
CVE-2009-3563ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth…UnratedEPSS 32.1%Dec 9, 2009
CVE-2024-30491WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerabilityMetagauss ProfileGridHigh · 8.5EPSS 32.0%Mar 29, 2024

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions