High-severity CVEs, ranked by estimated reach. Confirmed active exploitation (CISA KEV) and widely-deployed software are weighted highest — full technical detail (CVSS, dates, source) sits underneath each entry for anyone who wants it.