Vulnerabilities
EPSS
Also: Exploit Prediction Scoring System
A score from FIRST estimating the probability that a CVE will be exploited in the wild in the next 30 days.
In more detail
Most vulnerabilities are never exploited, and EPSS helps you find the few that will be. Use it to prioritize patching alongside severity and whether the affected software is exposed in your environment.