CVE risk calculator
The CVSS score alone is misleading: a 9.8 with no exploitation may be less urgent than a 7.5 already used in attacks. Combine the factors and see the real risk.
CVSS7.5
EPSS10%
probability of exploitation in the next 30 days
—/100
The Vexday Risk Score is our own reading (0–100) weighing severity (CVSS), probability (EPSS) and exploitation evidence (KEV, PoC, exploits). SSVC follows CISA’s model.