DaystoPatch

Evidence review queue

What still needs checking. New automated evidence enters this queue; it cannot mark a timeline reviewed or override a curated decision.

Priority 1: open exploited incidents and conflicts. Priority 2: high-impact unreviewed incidents and changed evidence. Priority 3–4: release-date research and missing review metadata. A missing review date does not mean an existing timeline was never reviewed.

Download the queue as JSON

Showing 30 of 866 records, in priority order.

  1. apple: Apple iOS and iPadOS Use-After-Free VulnerabilityPriority 1 · apple-cve-2023-41974 · Last timeline review: date not recorded
    • the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2024-01-10, 790 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown
    • Exploited incident awaiting its first timeline review
  2. apple: Apple Multiple products Use-After-Free VulnerabilityPriority 1 · apple-cve-2023-43000 · Last timeline review: date not recorded
    • the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2025-11-05, 125 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown
    • Exploited incident awaiting its first timeline review
  3. cisco: Cisco IOS 12.4 HTTP administration cross-site request forgeryPriority 1 · cisco-cve-2008-4128 · Last timeline review: date not recorded
    • exposure over 365 days; needs human review
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
  4. cisco: Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers remote command execution (end of life, no fix)Priority 1 · cisco-cve-2023-20118 · Last timeline review: date not recorded
    • exposure over 365 days; needs human review
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
    • 3 detected advisory change candidates need review (on/after the review date, or review date unknown)
  5. fortinet: FortiOS hard-coded key used to encrypt secrets in configuration backupsPriority 1 · fortinet-cve-2019-6693 · Last timeline review: date not recorded
    • the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2019-11-21, 221 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
    • 4 detected advisory change candidates need review (on/after the review date, or review date unknown)
  6. google: Android Framework Privilege Escalation VulnerabilityPriority 1 · google-cve-2024-43093 · Last timeline review: date not recorded
    • the vendor's original advisory is outside our collected window (the vendor's own CVE record was published 2024-11-13, 109 days before the earliest vendor item we hold); automated vendor and patch moments are left unknown
    • Exploited incident awaiting its first timeline review
  7. ivanti: Ivanti Connect Secure zero-day exploit chain (auth bypass + RCE, root privilege escalation)Priority 1 · ivanti-cve-2026-104935 · Last timeline review: date not recorded
    • Open in the recorded evidence for 13 days since the first public report: recheck fixes and supported branches
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
  8. juniper: Junos OS kernel isolation flaw used by UNC3886 to implant backdoors on Juniper routersPriority 1 · juniper-cve-2025-21590 · Last timeline review: date not recorded
    • Open in the recorded evidence for 594 days since the first public report: recheck fixes and supported branches
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
  9. zyxel: Zyxel legacy DSL CPE command injection flaws exploited by Mirai; end-of-life, no fixPriority 1 · zyxel-cve-2024-40890 · Last timeline review: date not recorded
    • exposure over 365 days; needs human review
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
  10. adobe: Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityPriority 2 · adobe-cve-2009-3459 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  11. adobe: Adobe ColdFusion Deserialization VulnerabilityPriority 2 · adobe-cve-2017-3066 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  12. adobe: Adobe Acrobat Use-After-Free VulnerabilityPriority 2 · adobe-cve-2020-9715 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  13. adobe: Adobe ColdFusion Improper Access Control VulnerabilityPriority 2 · adobe-cve-2024-20767 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  14. adobe: Adobe Commerce and Magento Improper Input Validation VulnerabilityPriority 2 · adobe-cve-2025-54236 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  15. adobe: Adobe Acrobat and Reader Prototype Pollution VulnerabilityPriority 2 · adobe-cve-2026-34621 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  16. adobe: Adobe ColdFusion Path Traversal VulnerabilityPriority 2 · adobe-cve-2026-48282 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  17. adobe: Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority 2 · adobe-cve-2026-71362 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  18. adobe: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPriority 2 · adobe-cve-2026-75650 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  19. apple: Apple Multiple Products Integer Overflow or Wraparound VulnerabilityPriority 2 · apple-cve-2021-30952 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  20. apple: Apple Multiple Products Unspecified VulnerabilityPriority 2 · apple-cve-2022-48503 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  21. apple: Apple Multiple Products Code Execution VulnerabilityPriority 2 · apple-cve-2024-44308 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  22. apple: Apple Multiple Products Use-After-Free VulnerabilityPriority 2 · apple-cve-2025-24085 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  23. apple: Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityPriority 2 · apple-cve-2025-24201 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  24. apple: Apple Multiple Products Memory Corruption VulnerabilityPriority 2 · apple-cve-2025-31200 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  25. apple: Apple Multiple Products Arbitrary Read and Write VulnerabilityPriority 2 · apple-cve-2025-31201 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  26. apple: Apple Multiple Products Buffer Overflow VulnerabilityPriority 2 · apple-cve-2025-31277 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  27. apple: Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPriority 2 · apple-cve-2025-43300 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  28. apple: Apple Multiple Products Improper Locking VulnerabilityPriority 2 · apple-cve-2025-43510 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review
  29. apple: WebKit/ANGLE flaws exploited against targeted iPhone users, publicly flagged by Google two days before Apple's fixPriority 2 · apple-cve-2025-43529 · Last timeline review: date not recorded
    • Patch quality has not been systematically reviewed
    • Timeline was reviewed, but its review date was not recorded
    • 7 detected advisory change candidates need review (on/after the review date, or review date unknown)
  30. apple: Apple Multiple Buffer Overflow VulnerabilityPriority 2 · apple-cve-2026-20700 · Last timeline review: date not recorded
    • Exploited incident awaiting its first timeline review