Prioritize a list of CVEs

Paste a list of CVE ids — or raw vulnerability-scanner output — and get a single table ranked by real-world urgency: CISA KEV known-exploited status, ENISA EU exploited flag, FIRST.org EPSS exploit probability, and CVSS base score. Export the result to CSV to drive your patch order.

How the ranking works

• Known exploited (CISA KEV) — confirmed active exploitation; always patch first.
• EU exploited (ENISA EUVD) — flagged exploited in the EU Vulnerability Database.
• EPSS — probability of exploitation in the next 30 days.
• CVSS — base severity, used to break ties.

See also what's exploited right now and the CVE search.