EPSS (Exploit Prediction Scoring System) estimates the probability of a software vulnerability being exploited in the wild within the next 30 days. It helps prioritize patching based on real-world risk.