--- title: "CISA KEV catalog, page 4 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=4 --- # CISA KEV catalog, page 4 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ---------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2025-58360](https://cubepath.com/security/cve/CVE-2025-58360) | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo / GeoServer | Dec 11, 2025 | Jan 1, 2026 | | | [CVE-2025-6218](https://cubepath.com/security/cve/CVE-2025-6218) | RARLAB WinRAR Path Traversal Vulnerability RARLAB / WinRAR | Dec 9, 2025 | Dec 30, 2025 | | | [CVE-2025-62221](https://cubepath.com/security/cve/CVE-2025-62221) | Microsoft Windows Use After Free Vulnerability Microsoft / Windows | Dec 9, 2025 | Dec 30, 2025 | | | [CVE-2022-37055](https://cubepath.com/security/cve/CVE-2022-37055) | D-Link Routers Buffer Overflow Vulnerability D-Link / Routers | Dec 8, 2025 | Dec 29, 2025 | | | [CVE-2025-66644](https://cubepath.com/security/cve/CVE-2025-66644) | Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks / ArrayOS AG | Dec 8, 2025 | Dec 29, 2025 | | | [CVE-2025-55182](https://cubepath.com/security/cve/CVE-2025-55182) | Meta React Server Components Remote Code Execution Vulnerability Meta / React Server Components | Dec 5, 2025 | Dec 12, 2025 | Known | | [CVE-2021-26828](https://cubepath.com/security/cve/CVE-2021-26828) | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC / ScadaBR | Dec 3, 2025 | Dec 24, 2025 | | | [CVE-2025-48572](https://cubepath.com/security/cve/CVE-2025-48572) | Android Framework Privilege Escalation Vulnerability Android / Framework | Dec 2, 2025 | Dec 23, 2025 | | | [CVE-2025-48633](https://cubepath.com/security/cve/CVE-2025-48633) | Android Framework Information Disclosure Vulnerability Android / Framework | Dec 2, 2025 | Dec 23, 2025 | | | [CVE-2021-26829](https://cubepath.com/security/cve/CVE-2021-26829) | OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC / ScadaBR | Nov 28, 2025 | Dec 19, 2025 | | | [CVE-2025-61757](https://cubepath.com/security/cve/CVE-2025-61757) | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle / Fusion Middleware | Nov 21, 2025 | Dec 12, 2025 | | | [CVE-2025-13223](https://cubepath.com/security/cve/CVE-2025-13223) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Nov 19, 2025 | Dec 10, 2025 | | | [CVE-2025-58034](https://cubepath.com/security/cve/CVE-2025-58034) | Fortinet FortiWeb OS Command Injection Vulnerability Fortinet / FortiWeb | Nov 18, 2025 | Nov 25, 2025 | | | [CVE-2025-64446](https://cubepath.com/security/cve/CVE-2025-64446) | Fortinet FortiWeb Path Traversal Vulnerability Fortinet / FortiWeb | Nov 14, 2025 | Nov 21, 2025 | | | [CVE-2025-12480](https://cubepath.com/security/cve/CVE-2025-12480) | Gladinet Triofox Improper Access Control Vulnerability Gladinet / Triofox | Nov 12, 2025 | Dec 3, 2025 | | | [CVE-2025-62215](https://cubepath.com/security/cve/CVE-2025-62215) | Microsoft Windows Race Condition Vulnerability Microsoft / Windows | Nov 12, 2025 | Dec 3, 2025 | | | [CVE-2025-9242](https://cubepath.com/security/cve/CVE-2025-9242) | WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard / Firebox | Nov 12, 2025 | Dec 3, 2025 | | | [CVE-2025-21042](https://cubepath.com/security/cve/CVE-2025-21042) | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung / Mobile Devices | Nov 10, 2025 | Dec 1, 2025 | | | [CVE-2025-11371](https://cubepath.com/security/cve/CVE-2025-11371) | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet / CentreStack and Triofox | Nov 4, 2025 | Nov 25, 2025 | | | [CVE-2025-48703](https://cubepath.com/security/cve/CVE-2025-48703) | CWP Control Web Panel OS Command Injection Vulnerability CWP / Control Web Panel | Nov 4, 2025 | Nov 25, 2025 | | | [CVE-2025-24893](https://cubepath.com/security/cve/CVE-2025-24893) | XWiki Platform Eval Injection Vulnerability XWiki / Platform | Oct 30, 2025 | Nov 20, 2025 | | | [CVE-2025-41244](https://cubepath.com/security/cve/CVE-2025-41244) | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom / VMware Aria Operations and VMware Tools | Oct 30, 2025 | Nov 20, 2025 | | | [CVE-2025-6204](https://cubepath.com/security/cve/CVE-2025-6204) | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes / DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | | | [CVE-2025-6205](https://cubepath.com/security/cve/CVE-2025-6205) | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes / DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | | | [CVE-2025-54236](https://cubepath.com/security/cve/CVE-2025-54236) | Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe / Commerce and Magento | Oct 24, 2025 | Nov 14, 2025 | | | [CVE-2025-59287](https://cubepath.com/security/cve/CVE-2025-59287) | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft / Windows | Oct 24, 2025 | Nov 14, 2025 | | | [CVE-2025-61932](https://cubepath.com/security/cve/CVE-2025-61932) | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex / LANSCOPE Endpoint Manager | Oct 22, 2025 | Nov 12, 2025 | | | [CVE-2022-48503](https://cubepath.com/security/cve/CVE-2022-48503) | Apple Multiple Products Unspecified Vulnerability Apple / Multiple Products | Oct 20, 2025 | Nov 10, 2025 | | | [CVE-2025-2746](https://cubepath.com/security/cve/CVE-2025-2746) | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico / Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | | | [CVE-2025-2747](https://cubepath.com/security/cve/CVE-2025-2747) | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico / Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | | | [CVE-2025-33073](https://cubepath.com/security/cve/CVE-2025-33073) | Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft / Windows | Oct 20, 2025 | Nov 10, 2025 | | | [CVE-2025-61884](https://cubepath.com/security/cve/CVE-2025-61884) | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle / E-Business Suite | Oct 20, 2025 | Nov 10, 2025 | Known | | [CVE-2025-54253](https://cubepath.com/security/cve/CVE-2025-54253) | Adobe Experience Manager Forms Code Execution Vulnerability Adobe / Experience Manager (AEM) Forms | Oct 15, 2025 | Nov 5, 2025 | | | [CVE-2016-7836](https://cubepath.com/security/cve/CVE-2016-7836) | SKYSEA Client View Improper Authentication Vulnerability SKYSEA / Client View | Oct 14, 2025 | Nov 4, 2025 | | | [CVE-2025-24990](https://cubepath.com/security/cve/CVE-2025-24990) | Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft / Windows | Oct 14, 2025 | Nov 4, 2025 | | | [CVE-2025-47827](https://cubepath.com/security/cve/CVE-2025-47827) | IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL / IGEL OS | Oct 14, 2025 | Nov 4, 2025 | | | [CVE-2025-59230](https://cubepath.com/security/cve/CVE-2025-59230) | Microsoft Windows Improper Access Control Vulnerability Microsoft / Windows | Oct 14, 2025 | Nov 4, 2025 | | | [CVE-2021-43798](https://cubepath.com/security/cve/CVE-2021-43798) | Grafana Path Traversal Vulnerability Grafana Labs / Grafana | Oct 9, 2025 | Oct 30, 2025 | | | [CVE-2025-27915](https://cubepath.com/security/cve/CVE-2025-27915) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Oct 7, 2025 | Oct 28, 2025 | | | [CVE-2010-3765](https://cubepath.com/security/cve/CVE-2010-3765) | Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla / Multiple Products | Oct 6, 2025 | Oct 27, 2025 | | | [CVE-2010-3962](https://cubepath.com/security/cve/CVE-2010-3962) | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft / Internet Explorer | Oct 6, 2025 | Oct 27, 2025 | | | [CVE-2011-3402](https://cubepath.com/security/cve/CVE-2011-3402) | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | | | [CVE-2013-3918](https://cubepath.com/security/cve/CVE-2013-3918) | Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | | | [CVE-2021-22555](https://cubepath.com/security/cve/CVE-2021-22555) | Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux / Kernel | Oct 6, 2025 | Oct 27, 2025 | | | [CVE-2021-43226](https://cubepath.com/security/cve/CVE-2021-43226) | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | Known | | [CVE-2025-61882](https://cubepath.com/security/cve/CVE-2025-61882) | Oracle E-Business Suite Unspecified Vulnerability Oracle / E-Business Suite | Oct 6, 2025 | Oct 27, 2025 | Known | | [CVE-2014-6278](https://cubepath.com/security/cve/CVE-2014-6278) | GNU Bash OS Command Injection Vulnerability GNU / GNU Bash | Oct 2, 2025 | Oct 23, 2025 | | | [CVE-2015-7755](https://cubepath.com/security/cve/CVE-2015-7755) | Juniper ScreenOS Improper Authentication Vulnerability Juniper / ScreenOS | Oct 2, 2025 | Oct 23, 2025 | | | [CVE-2017-1000353](https://cubepath.com/security/cve/CVE-2017-1000353) | Jenkins Remote Code Execution Vulnerability Jenkins / Jenkins | Oct 2, 2025 | Oct 23, 2025 | | | [CVE-2025-21043](https://cubepath.com/security/cve/CVE-2025-21043) | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung / Mobile Devices | Oct 2, 2025 | Oct 23, 2025 | | | [CVE-2025-4008](https://cubepath.com/security/cve/CVE-2025-4008) | Smartbedded Meteobridge Command Injection Vulnerability Smartbedded / Meteobridge | Oct 2, 2025 | Oct 23, 2025 | | | [CVE-2021-21311](https://cubepath.com/security/cve/CVE-2021-21311) | Adminer Server-Side Request Forgery Vulnerability Adminer / Adminer | Sep 29, 2025 | Oct 20, 2025 | | | [CVE-2025-10035](https://cubepath.com/security/cve/CVE-2025-10035) | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra / GoAnywhere MFT | Sep 29, 2025 | Oct 20, 2025 | Known | | [CVE-2025-20352](https://cubepath.com/security/cve/CVE-2025-20352) | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco / IOS and IOS XE | Sep 29, 2025 | Oct 20, 2025 | | | [CVE-2025-32463](https://cubepath.com/security/cve/CVE-2025-32463) | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo / Sudo | Sep 29, 2025 | Oct 20, 2025 | | | [CVE-2025-59689](https://cubepath.com/security/cve/CVE-2025-59689) | Libraesva Email Security Gateway Command Injection Vulnerability Libraesva / Email Security Gateway | Sep 29, 2025 | Oct 20, 2025 | | | [CVE-2025-20333](https://cubepath.com/security/cve/CVE-2025-20333) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | | | [CVE-2025-20362](https://cubepath.com/security/cve/CVE-2025-20362) | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | | | [CVE-2025-10585](https://cubepath.com/security/cve/CVE-2025-10585) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Sep 23, 2025 | Oct 14, 2025 | | | [CVE-2025-5086](https://cubepath.com/security/cve/CVE-2025-5086) | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes / DELMIA Apriso | Sep 11, 2025 | Oct 2, 2025 | | | [CVE-2025-38352](https://cubepath.com/security/cve/CVE-2025-38352) | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux / Kernel | Sep 4, 2025 | Sep 25, 2025 | | | [CVE-2025-48543](https://cubepath.com/security/cve/CVE-2025-48543) | Android Runtime Use-After-Free Vulnerability Android / Runtime | Sep 4, 2025 | Sep 25, 2025 | | | [CVE-2025-53690](https://cubepath.com/security/cve/CVE-2025-53690) | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore / Multiple Products | Sep 4, 2025 | Sep 25, 2025 | | | [CVE-2023-50224](https://cubepath.com/security/cve/CVE-2023-50224) | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link / TL-WR841N | Sep 3, 2025 | Sep 24, 2025 | | | [CVE-2025-9377](https://cubepath.com/security/cve/CVE-2025-9377) | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link / Multiple Routers | Sep 3, 2025 | Sep 24, 2025 | | | [CVE-2020-24363](https://cubepath.com/security/cve/CVE-2020-24363) | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link / TL-WA855RE | Sep 2, 2025 | Sep 23, 2025 | | | [CVE-2025-55177](https://cubepath.com/security/cve/CVE-2025-55177) | Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms / WhatsApp | Sep 2, 2025 | Sep 23, 2025 | | | [CVE-2025-57819](https://cubepath.com/security/cve/CVE-2025-57819) | Sangoma FreePBX Authentication Bypass Vulnerability Sangoma / FreePBX | Aug 29, 2025 | Sep 19, 2025 | | | [CVE-2025-7775](https://cubepath.com/security/cve/CVE-2025-7775) | Citrix NetScaler Memory Overflow Vulnerability Citrix / NetScaler | Aug 26, 2025 | Aug 28, 2025 | | | [CVE-2024-8068](https://cubepath.com/security/cve/CVE-2024-8068) | Citrix Session Recording Improper Privilege Management Vulnerability Citrix / Session Recording | Aug 25, 2025 | Sep 15, 2025 | | | [CVE-2024-8069](https://cubepath.com/security/cve/CVE-2024-8069) | Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix / Session Recording | Aug 25, 2025 | Sep 15, 2025 | | | [CVE-2025-48384](https://cubepath.com/security/cve/CVE-2025-48384) | Git Link Following Vulnerability Git / Git | Aug 25, 2025 | Sep 15, 2025 | | | [CVE-2025-43300](https://cubepath.com/security/cve/CVE-2025-43300) | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple / iOS, iPadOS, and macOS | Aug 21, 2025 | Sep 11, 2025 | | | [CVE-2025-54948](https://cubepath.com/security/cve/CVE-2025-54948) | Trend Micro Apex One OS Command Injection Vulnerability Trend Micro / Apex One | Aug 18, 2025 | Sep 8, 2025 | | | [CVE-2025-8875](https://cubepath.com/security/cve/CVE-2025-8875) | N-able N-Central Insecure Deserialization Vulnerability N-able / N-Central | Aug 13, 2025 | Aug 20, 2025 | | | [CVE-2025-8876](https://cubepath.com/security/cve/CVE-2025-8876) | N-able N-Central Command Injection Vulnerability N-able / N-Central | Aug 13, 2025 | Aug 20, 2025 | | | [CVE-2007-0671](https://cubepath.com/security/cve/CVE-2007-0671) | Microsoft Office Excel Remote Code Execution Vulnerability Microsoft / Office | Aug 12, 2025 | Sep 2, 2025 | | | [CVE-2013-3893](https://cubepath.com/security/cve/CVE-2013-3893) | Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft / Internet Explorer | Aug 12, 2025 | Sep 2, 2025 | | | [CVE-2025-8088](https://cubepath.com/security/cve/CVE-2025-8088) | RARLAB WinRAR Path Traversal Vulnerability RARLAB / WinRAR | Aug 12, 2025 | Sep 2, 2025 | Known | | [CVE-2020-25078](https://cubepath.com/security/cve/CVE-2020-25078) | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | | | [CVE-2020-25079](https://cubepath.com/security/cve/CVE-2020-25079) | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | | | [CVE-2022-40799](https://cubepath.com/security/cve/CVE-2022-40799) | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link / DNR-322L | Aug 5, 2025 | Aug 26, 2025 | | | [CVE-2023-2533](https://cubepath.com/security/cve/CVE-2023-2533) | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut / NG/MF | Jul 28, 2025 | Aug 18, 2025 | | | [CVE-2025-20281](https://cubepath.com/security/cve/CVE-2025-20281) | Cisco Identity Services Engine Injection Vulnerability Cisco / Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | | | [CVE-2025-20337](https://cubepath.com/security/cve/CVE-2025-20337) | Cisco Identity Services Engine Injection Vulnerability Cisco / Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | | | [CVE-2025-2775](https://cubepath.com/security/cve/CVE-2025-2775) | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid / SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | | | [CVE-2025-2776](https://cubepath.com/security/cve/CVE-2025-2776) | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid / SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | | | [CVE-2025-49704](https://cubepath.com/security/cve/CVE-2025-49704) | Microsoft SharePoint Code Injection Vulnerability Microsoft / SharePoint | Jul 22, 2025 | Jul 23, 2025 | Known | | [CVE-2025-49706](https://cubepath.com/security/cve/CVE-2025-49706) | Microsoft SharePoint Improper Authentication Vulnerability Microsoft / SharePoint | Jul 22, 2025 | Jul 23, 2025 | Known | | [CVE-2025-54309](https://cubepath.com/security/cve/CVE-2025-54309) | CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP / CrushFTP | Jul 22, 2025 | Aug 12, 2025 | | | [CVE-2025-6558](https://cubepath.com/security/cve/CVE-2025-6558) | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google / Chromium | Jul 22, 2025 | Aug 12, 2025 | | | [CVE-2025-53770](https://cubepath.com/security/cve/CVE-2025-53770) | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 20, 2025 | Jul 21, 2025 | Known | | [CVE-2025-25257](https://cubepath.com/security/cve/CVE-2025-25257) | Fortinet FortiWeb SQL Injection Vulnerability Fortinet / FortiWeb | Jul 18, 2025 | Aug 8, 2025 | | | [CVE-2025-47812](https://cubepath.com/security/cve/CVE-2025-47812) | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server / Wing FTP Server | Jul 14, 2025 | Aug 4, 2025 | | | [CVE-2025-5777](https://cubepath.com/security/cve/CVE-2025-5777) | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix / NetScaler ADC and Gateway | Jul 10, 2025 | Jul 11, 2025 | Known | | [CVE-2014-3931](https://cubepath.com/security/cve/CVE-2014-3931) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass / Multi-Router Looking Glass (MRLG) | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2016-10033](https://cubepath.com/security/cve/CVE-2016-10033) | PHPMailer Command Injection Vulnerability PHP / PHPMailer | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2019-5418](https://cubepath.com/security/cve/CVE-2019-5418) | Rails Ruby on Rails Path Traversal Vulnerability Rails / Ruby on Rails | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2019-9621](https://cubepath.com/security/cve/CVE-2019-9621) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2025-6554](https://cubepath.com/security/cve/CVE-2025-6554) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Jul 2, 2025 | Jul 23, 2025 | | [Newer](https://cubepath.com/security/cve/kev?page=3) Page 4 of 18 [Older](https://cubepath.com/security/cve/kev?page=5) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)