VulnTideExploited vulnerabilities, by vendor. Data as of 28 Oct 2026.

Vulnerabilities added to CISA KEV in 2025

245 entries, newest first.

CVENameVendorAddedRansomware
CVE-2025-14847MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityMongoDB29 Dec 2025Unknown
CVE-2023-52163Digiever DS-2105 Pro Missing Authorization VulnerabilityDigiever22 Dec 2025Unknown
CVE-2025-14733WatchGuard Firebox Out of Bounds Write VulnerabilityWatchGuard19 Dec 2025Known
CVE-2025-20393Cisco Multiple Products Improper Input Validation VulnerabilityCisco17 Dec 2025Unknown
CVE-2025-40602SonicWall SMA1000 Missing Authorization VulnerabilitySonicWall17 Dec 2025Unknown
CVE-2025-59374ASUS Live Update Embedded Malicious Code VulnerabilityASUS17 Dec 2025Unknown
CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityFortinet16 Dec 2025Unknown
CVE-2025-14611Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityGladinet15 Dec 2025Unknown
CVE-2025-43529Apple Multiple Products Use-After-Free WebKit VulnerabilityApple15 Dec 2025Unknown
CVE-2018-4063Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilitySierra Wireless12 Dec 2025Unknown
CVE-2025-14174Google Chromium Out of Bounds Memory Access VulnerabilityGoogle12 Dec 2025Unknown
CVE-2025-58360OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityOSGeo11 Dec 2025Unknown
CVE-2025-6218RARLAB WinRAR Path Traversal VulnerabilityRARLAB9 Dec 2025Unknown
CVE-2025-62221Microsoft Windows Use After Free VulnerabilityMicrosoft9 Dec 2025Unknown
CVE-2022-37055D-Link Routers Buffer Overflow VulnerabilityD-Link8 Dec 2025Unknown
CVE-2025-66644Array Networks ArrayOS AG OS Command Injection VulnerabilityArray Networks8 Dec 2025Unknown
CVE-2025-55182Meta React Server Components Remote Code Execution VulnerabilityMeta5 Dec 2025Known
CVE-2021-26828OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type VulnerabilityOpenPLC3 Dec 2025Unknown
CVE-2025-48572Android Framework Privilege Escalation VulnerabilityAndroid2 Dec 2025Unknown
CVE-2025-48633Android Framework Information Disclosure VulnerabilityAndroid2 Dec 2025Unknown
CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting VulnerabilityOpenPLC28 Nov 2025Unknown
CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityOracle21 Nov 2025Unknown
CVE-2025-13223Google Chromium V8 Type Confusion VulnerabilityGoogle19 Nov 2025Unknown
CVE-2025-58034Fortinet FortiWeb OS Command Injection VulnerabilityFortinet18 Nov 2025Unknown
CVE-2025-64446Fortinet FortiWeb Path Traversal VulnerabilityFortinet14 Nov 2025Unknown
CVE-2025-12480Gladinet Triofox Improper Access Control VulnerabilityGladinet12 Nov 2025Unknown
CVE-2025-62215Microsoft Windows Race Condition VulnerabilityMicrosoft12 Nov 2025Unknown
CVE-2025-9242WatchGuard Firebox Out-of-Bounds Write VulnerabilityWatchGuard12 Nov 2025Unknown
CVE-2025-21042Samsung Mobile Devices Out-of-Bounds Write VulnerabilitySamsung10 Nov 2025Unknown
CVE-2025-11371Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityGladinet4 Nov 2025Unknown
CVE-2025-48703CWP Control Web Panel OS Command Injection VulnerabilityCWP4 Nov 2025Unknown
CVE-2025-24893XWiki Platform Eval Injection VulnerabilityXWiki30 Oct 2025Unknown
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityBroadcom30 Oct 2025Unknown
CVE-2025-6204Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityDassault Systèmes28 Oct 2025Unknown
CVE-2025-6205Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityDassault Systèmes28 Oct 2025Unknown
CVE-2025-54236Adobe Commerce and Magento Improper Input Validation VulnerabilityAdobe24 Oct 2025Unknown
CVE-2025-59287Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityMicrosoft24 Oct 2025Unknown
CVE-2025-61932Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityMotex22 Oct 2025Unknown
CVE-2022-48503Apple Multiple Products Unspecified VulnerabilityApple20 Oct 2025Unknown
CVE-2025-2746Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityKentico20 Oct 2025Unknown
CVE-2025-2747Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityKentico20 Oct 2025Unknown
CVE-2025-33073Microsoft Windows SMB Client Improper Access Control VulnerabilityMicrosoft20 Oct 2025Unknown
CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityOracle20 Oct 2025Known
CVE-2025-54253Adobe Experience Manager Forms Code Execution VulnerabilityAdobe15 Oct 2025Unknown
CVE-2016-7836SKYSEA Client View Improper Authentication VulnerabilitySKYSEA14 Oct 2025Unknown
CVE-2025-24990Microsoft Windows Untrusted Pointer Dereference VulnerabilityMicrosoft14 Oct 2025Unknown
CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date VulnerabilityIGEL14 Oct 2025Unknown
CVE-2025-59230Microsoft Windows Improper Access Control VulnerabilityMicrosoft14 Oct 2025Unknown
CVE-2021-43798Grafana Path Traversal VulnerabilityGrafana9 Oct 2025Unknown
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilitySynacor7 Oct 2025Unknown
CVE-2010-3765Mozilla Multiple Products Remote Code Execution VulnerabilityMozilla6 Oct 2025Unknown
CVE-2010-3962Microsoft Internet Explorer Uninitialized Memory Corruption VulnerabilityMicrosoft6 Oct 2025Unknown
CVE-2011-3402Microsoft Windows Remote Code Execution VulnerabilityMicrosoft6 Oct 2025Unknown
CVE-2013-3918Microsoft Windows Out-of-Bounds Write VulnerabilityMicrosoft6 Oct 2025Unknown
CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write VulnerabilityLinux6 Oct 2025Unknown
CVE-2021-43226Microsoft Windows Privilege Escalation VulnerabilityMicrosoft6 Oct 2025Known
CVE-2025-61882Oracle E-Business Suite Unspecified VulnerabilityOracle6 Oct 2025Known
CVE-2014-6278GNU Bash OS Command Injection VulnerabilityGNU2 Oct 2025Unknown
CVE-2015-7755Juniper ScreenOS Improper Authentication VulnerabilityJuniper2 Oct 2025Unknown
CVE-2017-1000353Jenkins Remote Code Execution VulnerabilityJenkins2 Oct 2025Unknown
CVE-2025-21043Samsung Mobile Devices Out-of-Bounds Write VulnerabilitySamsung2 Oct 2025Unknown
CVE-2025-4008Smartbedded Meteobridge Command Injection VulnerabilitySmartbedded2 Oct 2025Unknown
CVE-2021-21311Adminer Server-Side Request Forgery VulnerabilityAdminer29 Sep 2025Unknown
CVE-2025-10035Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityFortra29 Sep 2025Known
CVE-2025-20352Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityCisco29 Sep 2025Unknown
CVE-2025-32463Sudo Inclusion of Functionality from Untrusted Control Sphere VulnerabilitySudo29 Sep 2025Unknown
CVE-2025-59689Libraesva Email Security Gateway Command Injection VulnerabilityLibraesva29 Sep 2025Unknown
CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityCisco25 Sep 2025Unknown
CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityCisco25 Sep 2025Unknown
CVE-2025-10585Google Chromium V8 Type Confusion VulnerabilityGoogle23 Sep 2025Unknown
CVE-2025-5086Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityDassault Systèmes11 Sep 2025Unknown
CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityLinux4 Sep 2025Unknown
CVE-2025-48543Android Runtime Use-After-Free VulnerabilityAndroid4 Sep 2025Unknown
CVE-2025-53690Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilitySitecore4 Sep 2025Unknown
CVE-2023-50224TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityTP-Link3 Sep 2025Unknown
CVE-2025-9377TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityTP-Link3 Sep 2025Unknown
CVE-2020-24363TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityTP-Link2 Sep 2025Unknown
CVE-2025-55177Meta Platforms WhatsApp Incorrect Authorization VulnerabilityMeta2 Sep 2025Unknown
CVE-2025-57819Sangoma FreePBX Authentication Bypass VulnerabilitySangoma29 Aug 2025Unknown
CVE-2025-7775Citrix NetScaler Memory Overflow VulnerabilityCitrix26 Aug 2025Unknown
CVE-2024-8068Citrix Session Recording Improper Privilege Management VulnerabilityCitrix25 Aug 2025Unknown
CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data VulnerabilityCitrix25 Aug 2025Unknown
CVE-2025-48384Git Link Following VulnerabilityGit25 Aug 2025Unknown
CVE-2025-43300Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityApple21 Aug 2025Unknown
CVE-2025-54948Trend Micro Apex One OS Command Injection VulnerabilityTrend Micro18 Aug 2025Unknown
CVE-2025-8875N-able N-Central Insecure Deserialization VulnerabilityN-able13 Aug 2025Unknown
CVE-2025-8876N-able N-Central Command Injection VulnerabilityN-able13 Aug 2025Unknown
CVE-2007-0671Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft12 Aug 2025Unknown
CVE-2013-3893Microsoft Internet Explorer Resource Management Errors VulnerabilityMicrosoft12 Aug 2025Unknown
CVE-2025-8088RARLAB WinRAR Path Traversal VulnerabilityRARLAB12 Aug 2025Known
CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityD-Link5 Aug 2025Unknown
CVE-2020-25079D-Link DCS-2530L and DCS-2670L Command Injection VulnerabilityD-Link5 Aug 2025Unknown
CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check VulnerabilityD-Link5 Aug 2025Unknown
CVE-2023-2533PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPaperCut28 Jul 2025Unknown
CVE-2025-20281Cisco Identity Services Engine Injection VulnerabilityCisco28 Jul 2025Unknown
CVE-2025-20337Cisco Identity Services Engine Injection VulnerabilityCisco28 Jul 2025Unknown
CVE-2025-2775SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilitySysAid22 Jul 2025Unknown
CVE-2025-2776SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilitySysAid22 Jul 2025Unknown
CVE-2025-49704Microsoft SharePoint Code Injection VulnerabilityMicrosoft22 Jul 2025Known
CVE-2025-49706Microsoft SharePoint Improper Authentication VulnerabilityMicrosoft22 Jul 2025Known
CVE-2025-54309 CrushFTP Unprotected Alternate Channel VulnerabilityCrushFTP22 Jul 2025Unknown
CVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityGoogle22 Jul 2025Unknown
CVE-2025-53770Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft20 Jul 2025Known
CVE-2025-25257Fortinet FortiWeb SQL Injection VulnerabilityFortinet18 Jul 2025Unknown
CVE-2025-47812Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityWing FTP Server14 Jul 2025Unknown
CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityCitrix10 Jul 2025Known
CVE-2014-3931Multi-Router Looking Glass (MRLG) Buffer Overflow VulnerabilityLooking Glass7 Jul 2025Unknown
CVE-2016-10033PHPMailer Command Injection VulnerabilityPHP7 Jul 2025Unknown
CVE-2019-5418Rails Ruby on Rails Path Traversal VulnerabilityRails7 Jul 2025Unknown
CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilitySynacor7 Jul 2025Unknown
CVE-2025-6554Google Chromium V8 Type Confusion VulnerabilityGoogle2 Jul 2025Unknown
CVE-2025-48927TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityTeleMessage1 Jul 2025Unknown
CVE-2025-48928TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere VulnerabilityTeleMessage1 Jul 2025Unknown
CVE-2025-6543Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityCitrix30 Jun 2025Unknown
CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityFortinet25 Jun 2025Known
CVE-2024-0769 D-Link DIR-859 Router Path Traversal VulnerabilityD-Link25 Jun 2025Unknown
CVE-2024-54085AMI MegaRAC SPx Authentication Bypass by Spoofing VulnerabilityAMI25 Jun 2025Unknown
CVE-2023-0386Linux Kernel Improper Ownership Management VulnerabilityLinux17 Jun 2025Unknown
CVE-2023-33538TP-Link Multiple Routers Command Injection VulnerabilityTP-Link16 Jun 2025Unknown
CVE-2025-43200Apple Multiple Products Unspecified VulnerabilityApple16 Jun 2025Unknown
CVE-2025-24016Wazuh Server Deserialization of Untrusted Data VulnerabilityWazuh10 Jun 2025Unknown
CVE-2025-33053 Microsoft Windows External Control of File Name or Path VulnerabilityMicrosoft10 Jun 2025Unknown
CVE-2024-42009RoundCube Webmail Cross-Site Scripting VulnerabilityRoundcube9 Jun 2025Unknown
CVE-2025-32433Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityErlang9 Jun 2025Unknown
CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityGoogle5 Jun 2025Unknown
CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityQualcomm3 Jun 2025Unknown
CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityQualcomm3 Jun 2025Unknown
CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm3 Jun 2025Unknown
CVE-2021-32030ASUS Routers Improper Authentication VulnerabilityASUS2 Jun 2025Unknown
CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection VulnerabilityASUS2 Jun 2025Unknown
CVE-2024-56145Craft CMS Code Injection VulnerabilityCraft CMS2 Jun 2025Unknown
CVE-2025-35939Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityCraft CMS2 Jun 2025Unknown
CVE-2025-3935ConnectWise ScreenConnect Improper Authentication VulnerabilityConnectWise2 Jun 2025Unknown
CVE-2025-4632Samsung MagicINFO 9 Server Path Traversal VulnerabilitySamsung22 May 2025Unknown
CVE-2023-38950ZKTeco BioTime Path Traversal VulnerabilityZKTeco19 May 2025Unknown
CVE-2024-11182MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityMDaemon19 May 2025Unknown
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor19 May 2025Unknown
CVE-2025-27920Srimax Output Messenger Directory Traversal VulnerabilitySrimax19 May 2025Unknown
CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityIvanti19 May 2025Unknown
CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvanti19 May 2025Unknown
CVE-2024-12987DrayTek Vigor Routers OS Command Injection VulnerabilityDrayTek15 May 2025Unknown
CVE-2025-42999SAP NetWeaver Deserialization VulnerabilitySAP15 May 2025Known
CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityFortinet14 May 2025Unknown
CVE-2025-30397Microsoft Windows Scripting Engine Type Confusion VulnerabilityMicrosoft13 May 2025Unknown
CVE-2025-30400Microsoft Windows DWM Core Library Use-After-Free VulnerabilityMicrosoft13 May 2025Unknown
CVE-2025-32701Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityMicrosoft13 May 2025Unknown
CVE-2025-32706Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityMicrosoft13 May 2025Unknown
CVE-2025-32709Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityMicrosoft13 May 2025Unknown
CVE-2025-47729TeleMessage TM SGNL Hidden Functionality VulnerabilityTeleMessage12 May 2025Unknown
CVE-2024-11120GeoVision Devices OS Command Injection VulnerabilityGeoVision7 May 2025Unknown
CVE-2024-6047GeoVision Devices OS Command Injection VulnerabilityGeoVision7 May 2025Unknown
CVE-2025-27363FreeType Out-of-Bounds Write VulnerabilityFreeType6 May 2025Unknown
CVE-2025-3248Langflow Missing Authentication VulnerabilityLangflow5 May 2025Known
CVE-2024-58136Yiiframework Yii Improper Protection of Alternate Path VulnerabilityYiiframework2 May 2025Unknown
CVE-2025-34028Commvault Command Center Path Traversal VulnerabilityCommvault2 May 2025Unknown
CVE-2023-44221SonicWall SMA100 Appliances OS Command Injection VulnerabilitySonicWall1 May 2025Unknown
CVE-2024-38475Apache HTTP Server Improper Escaping of Output VulnerabilityApache1 May 2025Unknown
CVE-2025-31324SAP NetWeaver Unrestricted File Upload VulnerabilitySAP29 Apr 2025Known
CVE-2025-1976Broadcom Brocade Fabric OS Code Injection VulnerabilityBroadcom28 Apr 2025Unknown
CVE-2025-3928Commvault Web Server Unspecified VulnerabilityCommvault28 Apr 2025Unknown
CVE-2025-42599Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityQualitia28 Apr 2025Unknown
CVE-2025-24054Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft17 Apr 2025Unknown
CVE-2025-31200Apple Multiple Products Memory Corruption VulnerabilityApple17 Apr 2025Unknown
CVE-2025-31201Apple Multiple Products Arbitrary Read and Write VulnerabilityApple17 Apr 2025Unknown
CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection VulnerabilitySonicWall16 Apr 2025Unknown
CVE-2024-53150Linux Kernel Out-of-Bounds Read VulnerabilityLinux9 Apr 2025Unknown
CVE-2024-53197Linux Kernel Out-of-Bounds Access VulnerabilityLinux9 Apr 2025Unknown
CVE-2025-29824Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityMicrosoft8 Apr 2025Known
CVE-2025-30406Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityGladinet8 Apr 2025Unknown
CVE-2025-31161CrushFTP Authentication Bypass VulnerabilityCrushFTP7 Apr 2025Known
CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityIvanti4 Apr 2025Known
CVE-2025-24813Apache Tomcat Path Equivalence VulnerabilityApache1 Apr 2025Unknown
CVE-2024-20439Cisco Smart Licensing Utility Static Credential VulnerabilityCisco31 Mar 2025Unknown
CVE-2025-2783Google Chromium Mojo Sandbox Escape VulnerabilityGoogle27 Mar 2025Unknown
CVE-2019-9874Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilitySitecore26 Mar 2025Unknown
CVE-2019-9875Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilitySitecore26 Mar 2025Unknown
CVE-2025-30154reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerabilityreviewdog24 Mar 2025Unknown
CVE-2017-12637SAP NetWeaver Directory Traversal VulnerabilitySAP19 Mar 2025Unknown
CVE-2024-48248NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityNAKIVO19 Mar 2025Unknown
CVE-2025-1316Edimax IC-7100 IP Camera OS Command Injection VulnerabilityEdimax19 Mar 2025Unknown
CVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet18 Mar 2025Known
CVE-2025-30066tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerabilitytj-actions18 Mar 2025Unknown
CVE-2025-21590Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityJuniper13 Mar 2025Unknown
CVE-2025-24201Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityApple13 Mar 2025Unknown
CVE-2025-24983Microsoft Windows Win32k Use-After-Free VulnerabilityMicrosoft11 Mar 2025Unknown
CVE-2025-24984Microsoft Windows NTFS Information Disclosure VulnerabilityMicrosoft11 Mar 2025Unknown
CVE-2025-24985Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityMicrosoft11 Mar 2025Unknown
CVE-2025-24991Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityMicrosoft11 Mar 2025Unknown
CVE-2025-24993Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityMicrosoft11 Mar 2025Unknown
CVE-2025-26633Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityMicrosoft11 Mar 2025Known
CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityIvanti10 Mar 2025Unknown
CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityIvanti10 Mar 2025Unknown
CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityIvanti10 Mar 2025Unknown
CVE-2024-57968Advantive VeraCore Unrestricted File Upload VulnerabilityAdvantive10 Mar 2025Unknown
CVE-2025-25181 Advantive VeraCore SQL Injection VulnerabilityAdvantive10 Mar 2025Unknown
CVE-2024-50302Linux Kernel Use of Uninitialized Resource VulnerabilityLinux4 Mar 2025Unknown
CVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityVMware4 Mar 2025Unknown
CVE-2025-22225VMware ESXi Arbitrary Write VulnerabilityVMware4 Mar 2025Known
CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityVMware4 Mar 2025Unknown
CVE-2018-8639Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityMicrosoft3 Mar 2025Known
CVE-2022-43769Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityHitachi Vantara3 Mar 2025Unknown
CVE-2022-43939Hitachi Vantara Pentaho BA Server Authorization Bypass VulnerabilityHitachi Vantara3 Mar 2025Unknown
CVE-2023-20118Cisco Small Business RV Series Routers Command Injection VulnerabilityCisco3 Mar 2025Unknown
CVE-2024-4885Progress WhatsUp Gold Path Traversal VulnerabilityProgress3 Mar 2025Unknown
CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor25 Feb 2025Unknown
CVE-2024-49035Microsoft Partner Center Improper Access Control VulnerabilityMicrosoft25 Feb 2025Unknown
CVE-2017-3066Adobe ColdFusion Deserialization VulnerabilityAdobe24 Feb 2025Unknown
CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityOracle24 Feb 2025Unknown
CVE-2025-24989Microsoft Power Pages Improper Access Control VulnerabilityMicrosoft21 Feb 2025Unknown
CVE-2025-0111Palo Alto Networks PAN-OS File Read VulnerabilityPalo Alto Networks20 Feb 2025Unknown
CVE-2025-23209Craft CMS Code Injection VulnerabilityCraft CMS20 Feb 2025Unknown
CVE-2024-53704SonicWall SonicOS SSLVPN Improper Authentication VulnerabilitySonicWall18 Feb 2025Known
CVE-2025-0108Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPalo Alto Networks18 Feb 2025Unknown
CVE-2024-57727SimpleHelp Path Traversal VulnerabilitySimpleHelp13 Feb 2025Known
CVE-2024-41710Mitel SIP Phones Argument Injection VulnerabilityMitel12 Feb 2025Unknown
CVE-2025-24200Apple iOS and iPadOS Incorrect Authorization VulnerabilityApple12 Feb 2025Unknown
CVE-2024-40890Zyxel DSL CPE OS Command Injection VulnerabilityZyxel11 Feb 2025Unknown
CVE-2024-40891Zyxel DSL CPE OS Command Injection VulnerabilityZyxel11 Feb 2025Unknown
CVE-2025-21391Microsoft Windows Storage Link Following VulnerabilityMicrosoft11 Feb 2025Unknown
CVE-2025-21418Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityMicrosoft11 Feb 2025Unknown
CVE-2025-0994Trimble Cityworks Deserialization VulnerabilityTrimble7 Feb 2025Unknown
CVE-2020-15069Sophos XG Firewall Buffer Overflow VulnerabilitySophos6 Feb 2025Unknown
CVE-2020-29574CyberoamOS (CROS) SQL Injection VulnerabilitySophos6 Feb 2025Known
CVE-2022-23748Dante Discovery Process Control VulnerabilityAudinate6 Feb 2025Unknown
CVE-2024-21413Microsoft Outlook Improper Input Validation VulnerabilityMicrosoft6 Feb 2025Unknown
CVE-2025-04117-Zip Mark of the Web Bypass Vulnerability7-Zip6 Feb 2025Unknown
CVE-2024-53104Linux Kernel Out-of-Bounds Write VulnerabilityLinux5 Feb 2025Unknown
CVE-2018-19410Paessler PRTG Network Monitor Local File Inclusion VulnerabilityPaessler4 Feb 2025Unknown
CVE-2018-9276Paessler PRTG Network Monitor OS Command Injection VulnerabilityPaessler4 Feb 2025Unknown
CVE-2024-29059Microsoft .NET Framework Information Disclosure VulnerabilityMicrosoft4 Feb 2025Unknown
CVE-2024-45195Apache OFBiz Forced Browsing VulnerabilityApache4 Feb 2025Unknown
CVE-2025-24085Apple Multiple Products Use-After-Free VulnerabilityApple29 Jan 2025Unknown
CVE-2025-23006SonicWall SMA1000 Appliances Deserialization VulnerabilitySonicWall24 Jan 2025Known
CVE-2020-11023JQuery Cross-Site Scripting (XSS) VulnerabilityJQuery23 Jan 2025Unknown
CVE-2024-50603Aviatrix Controllers OS Command Injection VulnerabilityAviatrix16 Jan 2025Unknown
CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet14 Jan 2025Known
CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityMicrosoft14 Jan 2025Unknown
CVE-2025-21334Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityMicrosoft14 Jan 2025Unknown
CVE-2025-21335Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityMicrosoft14 Jan 2025Unknown
CVE-2023-48365Qlik Sense HTTP Tunneling VulnerabilityQlik13 Jan 2025Known
CVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityBeyondTrust13 Jan 2025Unknown
CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityIvanti8 Jan 2025Known
CVE-2020-2883Oracle WebLogic Server Unspecified VulnerabilityOracle7 Jan 2025Unknown
CVE-2024-41713Mitel MiCollab Path Traversal VulnerabilityMitel7 Jan 2025Known
CVE-2024-55550Mitel MiCollab Path Traversal VulnerabilityMitel7 Jan 2025Known

Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.28, as of 28 Oct 2026. About the data.

All years