Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


fedora

CVE-2021-44228

Prediction +94.45

10.0 CRITICAL

sharepoint enterprise ser

CVE-2019-0604

Prediction +94.44

9.8 CRITICAL

endpoint manager mobile

CVE-2023-35082

Prediction +94.40

10.0 CRITICAL

vcenter server

CVE-2020-3952

Prediction +94.39

9.8 CRITICAL

r6700 firmware

CVE-2016-6277

Prediction +94.30

9.3 HIGH

dns 320 firmware

CVE-2020-25506

Prediction +94.29

9.8 CRITICAL

office

CVE-2018-0798

Prediction +94.06

9.3 HIGH

enterprise linux desktop

CVE-2012-1723

Prediction +93.98

10.0 HIGH

hwl 2511 ss firmware

CVE-2022-36553

Prediction +93.70

9.8 CRITICAL

exchange server

CVE-2021-33766

Prediction +93.65

7.5 HIGH

nsx sd wan by velocloud

CVE-2018-6961

Prediction +93.64

8.1 HIGH

office

CVE-2023-23397

Prediction +93.64

9.8 CRITICAL

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
March 8, 2026 CVE-2010-2965 Windriver 93.10 Aug. 5, 2010, 1:22 p.m.

29.45

March 8, 2026 CVE-2010-2965 Rockwellautomation 93.10 Aug. 5, 2010, 1:22 p.m.

29.45

March 8, 2026 CVE-2010-2965 Rockwellautomation 93.10 Aug. 5, 2010, 1:22 p.m.

29.45

March 8, 2026 CVE-2014-3744 Nodejs 80.74 Oct. 23, 2017, 6:29 p.m.

25.58

March 8, 2026 CVE-2014-3583 Canonical 41.81 Dec. 15, 2014, 6:59 p.m.

22.03

March 8, 2026 CVE-2014-3583 Apache 41.81 Dec. 15, 2014, 6:59 p.m.

22.03

March 8, 2026 CVE-2014-3583 Apple 41.81 Dec. 15, 2014, 6:59 p.m.

22.03

March 8, 2026 CVE-2014-3583 Apple 41.81 Dec. 15, 2014, 6:59 p.m.

22.03

March 8, 2026 CVE-2023-0084 Wpmet 59.49 March 2, 2023, 7:15 p.m.

19.95

March 8, 2026 CVE-2012-4558 Apache 28.24 Feb. 26, 2013, 4:55 p.m.

-16.27