--- title: "CISA KEV catalog, page 3 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=3 --- # CISA KEV catalog, page 3 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2025-48700](https://cubepath.com/security/cve/CVE-2025-48700) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Apr 20, 2026 | Apr 23, 2026 | | | [CVE-2026-20122](https://cubepath.com/security/cve/CVE-2026-20122) | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco / Catalyst SD-WAN Manger | Apr 20, 2026 | Apr 23, 2026 | | | [CVE-2026-20128](https://cubepath.com/security/cve/CVE-2026-20128) | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco / Catalyst SD-WAN Manager | Apr 20, 2026 | Apr 23, 2026 | | | [CVE-2026-20133](https://cubepath.com/security/cve/CVE-2026-20133) | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco / Catalyst SD-WAN Manager | Apr 20, 2026 | Apr 23, 2026 | | | [CVE-2026-34197](https://cubepath.com/security/cve/CVE-2026-34197) | Apache ActiveMQ Improper Input Validation Vulnerability Apache / ActiveMQ | Apr 16, 2026 | Apr 30, 2026 | | | [CVE-2009-0238](https://cubepath.com/security/cve/CVE-2009-0238) | Microsoft Office Remote Code Execution Microsoft / Office | Apr 14, 2026 | Apr 28, 2026 | | | [CVE-2026-32201](https://cubepath.com/security/cve/CVE-2026-32201) | Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft / SharePoint Server | Apr 14, 2026 | Apr 28, 2026 | | | [CVE-2012-1854](https://cubepath.com/security/cve/CVE-2012-1854) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft / Visual Basic for Applications (VBA) | Apr 13, 2026 | Apr 27, 2026 | | | [CVE-2020-9715](https://cubepath.com/security/cve/CVE-2020-9715) | Adobe Acrobat Use-After-Free Vulnerability Adobe / Acrobat | Apr 13, 2026 | Apr 27, 2026 | | | [CVE-2023-21529](https://cubepath.com/security/cve/CVE-2023-21529) | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft / Exchange Server | Apr 13, 2026 | Apr 27, 2026 | Known | | [CVE-2023-36424](https://cubepath.com/security/cve/CVE-2023-36424) | Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft / Windows | Apr 13, 2026 | Apr 27, 2026 | | | [CVE-2025-60710](https://cubepath.com/security/cve/CVE-2025-60710) | Microsoft Windows Link Following Vulnerability Microsoft / Windows | Apr 13, 2026 | Apr 27, 2026 | Known | | [CVE-2026-21643](https://cubepath.com/security/cve/CVE-2026-21643) | Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet / FortiClient EMS | Apr 13, 2026 | Apr 16, 2026 | | | [CVE-2026-34621](https://cubepath.com/security/cve/CVE-2026-34621) | Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe / Acrobat and Reader | Apr 13, 2026 | Apr 27, 2026 | | | [CVE-2026-1340](https://cubepath.com/security/cve/CVE-2026-1340) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | Apr 8, 2026 | Apr 11, 2026 | | | [CVE-2026-35616](https://cubepath.com/security/cve/CVE-2026-35616) | Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet / FortiClient EMS | Apr 6, 2026 | Apr 9, 2026 | | | [CVE-2026-3502](https://cubepath.com/security/cve/CVE-2026-3502) | TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf / Client | Apr 2, 2026 | Apr 16, 2026 | | | [CVE-2026-5281](https://cubepath.com/security/cve/CVE-2026-5281) | Google Dawn Use-After-Free Vulnerability Google / Dawn | Apr 1, 2026 | Apr 15, 2026 | | | [CVE-2026-3055](https://cubepath.com/security/cve/CVE-2026-3055) | Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix / NetScaler | Mar 30, 2026 | Apr 2, 2026 | | | [CVE-2025-53521](https://cubepath.com/security/cve/CVE-2025-53521) | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 / BIG-IP | Mar 27, 2026 | Mar 30, 2026 | | | [CVE-2026-33634](https://cubepath.com/security/cve/CVE-2026-33634) | Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity / Trivy | Mar 26, 2026 | Apr 9, 2026 | | | [CVE-2026-33017](https://cubepath.com/security/cve/CVE-2026-33017) | Langflow Code Injection Vulnerability Langflow / Langflow | Mar 25, 2026 | Apr 8, 2026 | | | [CVE-2025-31277](https://cubepath.com/security/cve/CVE-2025-31277) | Apple Multiple Products Buffer Overflow Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | | | [CVE-2025-32432](https://cubepath.com/security/cve/CVE-2025-32432) | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Mar 20, 2026 | Apr 3, 2026 | | | [CVE-2025-43510](https://cubepath.com/security/cve/CVE-2025-43510) | Apple Multiple Products Improper Locking Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | | | [CVE-2025-43520](https://cubepath.com/security/cve/CVE-2025-43520) | Apple Multiple Products Classic Buffer Overflow Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | | | [CVE-2025-54068](https://cubepath.com/security/cve/CVE-2025-54068) | Laravel Livewire Code Injection Vulnerability Laravel / Livewire | Mar 20, 2026 | Apr 3, 2026 | | | [CVE-2026-20131](https://cubepath.com/security/cve/CVE-2026-20131) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco / Secure Firewall Management Center (FMC) | Mar 19, 2026 | Mar 22, 2026 | Known | | [CVE-2025-66376](https://cubepath.com/security/cve/CVE-2025-66376) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Mar 18, 2026 | Apr 1, 2026 | | | [CVE-2026-20963](https://cubepath.com/security/cve/CVE-2026-20963) | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Mar 18, 2026 | Mar 21, 2026 | | | [CVE-2025-47813](https://cubepath.com/security/cve/CVE-2025-47813) | Wing FTP Server Information Disclosure Vulnerability Wing FTP Server / Wing FTP Server | Mar 16, 2026 | Mar 30, 2026 | | | [CVE-2026-3909](https://cubepath.com/security/cve/CVE-2026-3909) | Google Skia Out-of-Bounds Write Vulnerability Google / Skia | Mar 13, 2026 | Mar 27, 2026 | | | [CVE-2026-3910](https://cubepath.com/security/cve/CVE-2026-3910) | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google / Chromium V8 | Mar 13, 2026 | Mar 27, 2026 | | | [CVE-2025-68613](https://cubepath.com/security/cve/CVE-2025-68613) | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n / n8n | Mar 11, 2026 | Mar 25, 2026 | | | [CVE-2021-22054](https://cubepath.com/security/cve/CVE-2021-22054) | Omnissa Workspace ONE Server-Side Request Forgery Omnissa / Workspace One UEM | Mar 9, 2026 | Mar 23, 2026 | | | [CVE-2025-26399](https://cubepath.com/security/cve/CVE-2025-26399) | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Mar 9, 2026 | Mar 12, 2026 | Known | | [CVE-2026-1603](https://cubepath.com/security/cve/CVE-2026-1603) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 9, 2026 | Mar 23, 2026 | | | [CVE-2017-7921](https://cubepath.com/security/cve/CVE-2017-7921) | Hikvision Multiple Products Improper Authentication Vulnerability Hikvision / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | | | [CVE-2021-22681](https://cubepath.com/security/cve/CVE-2021-22681) | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | | | [CVE-2021-30952](https://cubepath.com/security/cve/CVE-2021-30952) | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | | | [CVE-2023-41974](https://cubepath.com/security/cve/CVE-2023-41974) | Apple iOS and iPadOS Use-After-Free Vulnerability Apple / iOS and iPadOS | Mar 5, 2026 | Mar 26, 2026 | | | [CVE-2023-43000](https://cubepath.com/security/cve/CVE-2023-43000) | Apple Multiple products Use-After-Free Vulnerability Apple / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | | | [CVE-2026-21385](https://cubepath.com/security/cve/CVE-2026-21385) | Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm / Multiple Chipsets | Mar 3, 2026 | Mar 24, 2026 | | | [CVE-2026-22719](https://cubepath.com/security/cve/CVE-2026-22719) | Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom / VMware Aria Operations | Mar 3, 2026 | Mar 24, 2026 | | | [CVE-2022-20775](https://cubepath.com/security/cve/CVE-2022-20775) | Cisco SD-WAN Path Traversal Vulnerability Cisco / SD-WAN | Feb 25, 2026 | Feb 27, 2026 | | | [CVE-2026-20127](https://cubepath.com/security/cve/CVE-2026-20127) | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco / Catalyst SD-WAN Controller and Manager | Feb 25, 2026 | Feb 27, 2026 | | | [CVE-2026-25108](https://cubepath.com/security/cve/CVE-2026-25108) | Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K / FileZen | Feb 24, 2026 | Mar 17, 2026 | | | [CVE-2025-49113](https://cubepath.com/security/cve/CVE-2025-49113) | RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube / Webmail | Feb 20, 2026 | Mar 13, 2026 | | | [CVE-2025-68461](https://cubepath.com/security/cve/CVE-2025-68461) | RoundCube Webmail Cross-site Scripting Vulnerability Roundcube / Webmail | Feb 20, 2026 | Mar 13, 2026 | | | [CVE-2021-22175](https://cubepath.com/security/cve/CVE-2021-22175) | GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab / GitLab | Feb 18, 2026 | Mar 11, 2026 | | | [CVE-2026-22769](https://cubepath.com/security/cve/CVE-2026-22769) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell / RecoverPoint for Virtual Machines (RP4VMs) | Feb 18, 2026 | Feb 21, 2026 | | | [CVE-2008-0015](https://cubepath.com/security/cve/CVE-2008-0015) | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft / Windows | Feb 17, 2026 | Mar 10, 2026 | | | [CVE-2020-7796](https://cubepath.com/security/cve/CVE-2020-7796) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor / Zimbra Collaboration Suite | Feb 17, 2026 | Mar 10, 2026 | | | [CVE-2024-7694](https://cubepath.com/security/cve/CVE-2024-7694) | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 / ThreatSonar Anti-Ransomware | Feb 17, 2026 | Mar 10, 2026 | | | [CVE-2026-2441](https://cubepath.com/security/cve/CVE-2026-2441) | Google Chromium CSS Use-After-Free Vulnerability Google / Chromium | Feb 17, 2026 | Mar 10, 2026 | | | [CVE-2026-1731](https://cubepath.com/security/cve/CVE-2026-1731) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA) | Feb 13, 2026 | Feb 16, 2026 | Known | | [CVE-2024-43468](https://cubepath.com/security/cve/CVE-2024-43468) | Microsoft Configuration Manager SQL Injection Vulnerability Microsoft / Configuration Manager | Feb 12, 2026 | Mar 5, 2026 | | | [CVE-2025-15556](https://cubepath.com/security/cve/CVE-2025-15556) | Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ / Notepad++ | Feb 12, 2026 | Mar 5, 2026 | | | [CVE-2025-40536](https://cubepath.com/security/cve/CVE-2025-40536) | SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds / Web Help Desk | Feb 12, 2026 | Feb 15, 2026 | | | [CVE-2026-20700](https://cubepath.com/security/cve/CVE-2026-20700) | Apple Multiple Buffer Overflow Vulnerability Apple / Multiple Products | Feb 12, 2026 | Mar 5, 2026 | | | [CVE-2026-21510](https://cubepath.com/security/cve/CVE-2026-21510) | Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2026-21513](https://cubepath.com/security/cve/CVE-2026-21513) | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2026-21514](https://cubepath.com/security/cve/CVE-2026-21514) | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft / Office | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2026-21519](https://cubepath.com/security/cve/CVE-2026-21519) | Microsoft Windows Type Confusion Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2026-21525](https://cubepath.com/security/cve/CVE-2026-21525) | Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2026-21533](https://cubepath.com/security/cve/CVE-2026-21533) | Microsoft Windows Improper Privilege Management Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | | | [CVE-2025-11953](https://cubepath.com/security/cve/CVE-2025-11953) | React Native Community CLI OS Command Injection Vulnerability React Native Community / CLI | Feb 5, 2026 | Feb 26, 2026 | | | [CVE-2026-24423](https://cubepath.com/security/cve/CVE-2026-24423) | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools / SmarterMail | Feb 5, 2026 | Feb 26, 2026 | Known | | [CVE-2019-19006](https://cubepath.com/security/cve/CVE-2019-19006) | Sangoma FreePBX Improper Authentication Vulnerability Sangoma / FreePBX | Feb 3, 2026 | Feb 24, 2026 | | | [CVE-2021-39935](https://cubepath.com/security/cve/CVE-2021-39935) | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab / Community and Enterprise Editions | Feb 3, 2026 | Feb 24, 2026 | | | [CVE-2025-40551](https://cubepath.com/security/cve/CVE-2025-40551) | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Feb 3, 2026 | Feb 6, 2026 | | | [CVE-2025-64328](https://cubepath.com/security/cve/CVE-2025-64328) | Sangoma FreePBX OS Command Injection Vulnerability Sangoma / FreePBX | Feb 3, 2026 | Feb 24, 2026 | | | [CVE-2026-1281](https://cubepath.com/security/cve/CVE-2026-1281) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | Jan 29, 2026 | Feb 1, 2026 | | | [CVE-2026-24858](https://cubepath.com/security/cve/CVE-2026-24858) | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet / Multiple Products | Jan 27, 2026 | Jan 30, 2026 | | | [CVE-2018-14634](https://cubepath.com/security/cve/CVE-2018-14634) | Linux Kernel Integer Overflow Vulnerability Linux / Kernel | Jan 26, 2026 | Feb 16, 2026 | | | [CVE-2025-52691](https://cubepath.com/security/cve/CVE-2025-52691) | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools / SmarterMail | Jan 26, 2026 | Feb 16, 2026 | Known | | [CVE-2026-21509](https://cubepath.com/security/cve/CVE-2026-21509) | Microsoft Office Security Feature Bypass Vulnerability Microsoft / Office | Jan 26, 2026 | Feb 16, 2026 | | | [CVE-2026-23760](https://cubepath.com/security/cve/CVE-2026-23760) | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools / SmarterMail | Jan 26, 2026 | Feb 16, 2026 | Known | | [CVE-2026-24061](https://cubepath.com/security/cve/CVE-2026-24061) | GNU InetUtils Argument Injection Vulnerability GNU / InetUtils | Jan 26, 2026 | Feb 16, 2026 | | | [CVE-2024-37079](https://cubepath.com/security/cve/CVE-2024-37079) | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom / VMware vCenter Server | Jan 23, 2026 | Feb 13, 2026 | | | [CVE-2025-31125](https://cubepath.com/security/cve/CVE-2025-31125) | Vite Vitejs Improper Access Control Vulnerability Vite / Vitejs | Jan 22, 2026 | Feb 12, 2026 | | | [CVE-2025-34026](https://cubepath.com/security/cve/CVE-2025-34026) | Versa Concerto Improper Authentication Vulnerability Versa / Concerto | Jan 22, 2026 | Feb 12, 2026 | | | [CVE-2025-54313](https://cubepath.com/security/cve/CVE-2025-54313) | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier / eslint-config-prettier | Jan 22, 2026 | Feb 12, 2026 | | | [CVE-2025-68645](https://cubepath.com/security/cve/CVE-2025-68645) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Jan 22, 2026 | Feb 12, 2026 | | | [CVE-2026-20045](https://cubepath.com/security/cve/CVE-2026-20045) | Cisco Unified Communications Products Code Injection Vulnerability Cisco / Unified Communications Manager | Jan 21, 2026 | Feb 11, 2026 | | | [CVE-2026-20805](https://cubepath.com/security/cve/CVE-2026-20805) | Microsoft Windows Information Disclosure Vulnerability Microsoft / Windows | Jan 13, 2026 | Feb 3, 2026 | | | [CVE-2025-8110](https://cubepath.com/security/cve/CVE-2025-8110) | Gogs Path Traversal Vulnerability Gogs / Gogs | Jan 12, 2026 | Feb 2, 2026 | | | [CVE-2009-0556](https://cubepath.com/security/cve/CVE-2009-0556) | Microsoft Office PowerPoint Code Injection Vulnerability Microsoft / Office | Jan 7, 2026 | Jan 28, 2026 | | | [CVE-2025-37164](https://cubepath.com/security/cve/CVE-2025-37164) | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) / OneView | Jan 7, 2026 | Jan 28, 2026 | | | [CVE-2025-14847](https://cubepath.com/security/cve/CVE-2025-14847) | MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB / MongoDB and MongoDB Server | Dec 29, 2025 | Jan 19, 2026 | | | [CVE-2023-52163](https://cubepath.com/security/cve/CVE-2023-52163) | Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever / DS-2105 Pro | Dec 22, 2025 | Jan 12, 2026 | | | [CVE-2025-14733](https://cubepath.com/security/cve/CVE-2025-14733) | WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard / Firebox | Dec 19, 2025 | Dec 26, 2025 | Known | | [CVE-2025-20393](https://cubepath.com/security/cve/CVE-2025-20393) | Cisco Multiple Products Improper Input Validation Vulnerability Cisco / Multiple Products | Dec 17, 2025 | Dec 24, 2025 | | | [CVE-2025-40602](https://cubepath.com/security/cve/CVE-2025-40602) | SonicWall SMA1000 Missing Authorization Vulnerability SonicWall / SMA1000 appliance | Dec 17, 2025 | Dec 24, 2025 | | | [CVE-2025-59374](https://cubepath.com/security/cve/CVE-2025-59374) | ASUS Live Update Embedded Malicious Code Vulnerability ASUS / Live Update | Dec 17, 2025 | Jan 7, 2026 | | | [CVE-2025-59718](https://cubepath.com/security/cve/CVE-2025-59718) | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet / Multiple Products | Dec 16, 2025 | Dec 23, 2025 | | | [CVE-2025-14611](https://cubepath.com/security/cve/CVE-2025-14611) | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet / CentreStack and Triofox | Dec 15, 2025 | Jan 5, 2026 | | | [CVE-2025-43529](https://cubepath.com/security/cve/CVE-2025-43529) | Apple Multiple Products Use-After-Free WebKit Vulnerability Apple / Multiple Products | Dec 15, 2025 | Jan 5, 2026 | | | [CVE-2018-4063](https://cubepath.com/security/cve/CVE-2018-4063) | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless / AirLink ALEOS | Dec 12, 2025 | Jan 2, 2026 | | | [CVE-2025-14174](https://cubepath.com/security/cve/CVE-2025-14174) | Google Chromium Out of Bounds Memory Access Vulnerability Google / Chromium | Dec 12, 2025 | Jan 2, 2026 | | [Newer](https://cubepath.com/security/cve/kev?page=2) Page 3 of 18 [Older](https://cubepath.com/security/cve/kev?page=4) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)