Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,773 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.09. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2025-58360 | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo / GeoServer | Dec 11, 2025 | Jan 1, 2026 | |
| CVE-2025-6218 | RARLAB WinRAR Path Traversal Vulnerability RARLAB / WinRAR | Dec 9, 2025 | Dec 30, 2025 | |
| CVE-2025-62221 | Microsoft Windows Use After Free Vulnerability Microsoft / Windows | Dec 9, 2025 | Dec 30, 2025 | |
| CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability D-Link / Routers | Dec 8, 2025 | Dec 29, 2025 | |
| CVE-2025-66644 | Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks / ArrayOS AG | Dec 8, 2025 | Dec 29, 2025 | |
| CVE-2025-55182 | Meta React Server Components Remote Code Execution Vulnerability Meta / React Server Components | Dec 5, 2025 | Dec 12, 2025 | Known |
| CVE-2021-26828 | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC / ScadaBR | Dec 3, 2025 | Dec 24, 2025 | |
| CVE-2025-48572 | Android Framework Privilege Escalation Vulnerability Android / Framework | Dec 2, 2025 | Dec 23, 2025 | |
| CVE-2025-48633 | Android Framework Information Disclosure Vulnerability Android / Framework | Dec 2, 2025 | Dec 23, 2025 | |
| CVE-2021-26829 | OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC / ScadaBR | Nov 28, 2025 | Dec 19, 2025 | |
| CVE-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle / Fusion Middleware | Nov 21, 2025 | Dec 12, 2025 | |
| CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Nov 19, 2025 | Dec 10, 2025 | |
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection Vulnerability Fortinet / FortiWeb | Nov 18, 2025 | Nov 25, 2025 | |
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal Vulnerability Fortinet / FortiWeb | Nov 14, 2025 | Nov 21, 2025 | |
| CVE-2025-12480 | Gladinet Triofox Improper Access Control Vulnerability Gladinet / Triofox | Nov 12, 2025 | Dec 3, 2025 | |
| CVE-2025-62215 | Microsoft Windows Race Condition Vulnerability Microsoft / Windows | Nov 12, 2025 | Dec 3, 2025 | |
| CVE-2025-9242 | WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard / Firebox | Nov 12, 2025 | Dec 3, 2025 | |
| CVE-2025-21042 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung / Mobile Devices | Nov 10, 2025 | Dec 1, 2025 | |
| CVE-2025-11371 | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet / CentreStack and Triofox | Nov 4, 2025 | Nov 25, 2025 | |
| CVE-2025-48703 | CWP Control Web Panel OS Command Injection Vulnerability CWP / Control Web Panel | Nov 4, 2025 | Nov 25, 2025 | |
| CVE-2025-24893 | XWiki Platform Eval Injection Vulnerability XWiki / Platform | Oct 30, 2025 | Nov 20, 2025 | |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom / VMware Aria Operations and VMware Tools | Oct 30, 2025 | Nov 20, 2025 | |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes / DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes / DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | |
| CVE-2025-54236 | Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe / Commerce and Magento | Oct 24, 2025 | Nov 14, 2025 | |
| CVE-2025-59287 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft / Windows | Oct 24, 2025 | Nov 14, 2025 | |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex / LANSCOPE Endpoint Manager | Oct 22, 2025 | Nov 12, 2025 | |
| CVE-2022-48503 | Apple Multiple Products Unspecified Vulnerability Apple / Multiple Products | Oct 20, 2025 | Nov 10, 2025 | |
| CVE-2025-2746 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico / Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | |
| CVE-2025-2747 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico / Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | |
| CVE-2025-33073 | Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft / Windows | Oct 20, 2025 | Nov 10, 2025 | |
| CVE-2025-61884 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle / E-Business Suite | Oct 20, 2025 | Nov 10, 2025 | Known |
| CVE-2025-54253 | Adobe Experience Manager Forms Code Execution Vulnerability Adobe / Experience Manager (AEM) Forms | Oct 15, 2025 | Nov 5, 2025 | |
| CVE-2016-7836 | SKYSEA Client View Improper Authentication Vulnerability SKYSEA / Client View | Oct 14, 2025 | Nov 4, 2025 | |
| CVE-2025-24990 | Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft / Windows | Oct 14, 2025 | Nov 4, 2025 | |
| CVE-2025-47827 | IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL / IGEL OS | Oct 14, 2025 | Nov 4, 2025 | |
| CVE-2025-59230 | Microsoft Windows Improper Access Control Vulnerability Microsoft / Windows | Oct 14, 2025 | Nov 4, 2025 | |
| CVE-2021-43798 | Grafana Path Traversal Vulnerability Grafana Labs / Grafana | Oct 9, 2025 | Oct 30, 2025 | |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Oct 7, 2025 | Oct 28, 2025 | |
| CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla / Multiple Products | Oct 6, 2025 | Oct 27, 2025 | |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft / Internet Explorer | Oct 6, 2025 | Oct 27, 2025 | |
| CVE-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | |
| CVE-2021-22555 | Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux / Kernel | Oct 6, 2025 | Oct 27, 2025 | |
| CVE-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Oct 6, 2025 | Oct 27, 2025 | Known |
| CVE-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability Oracle / E-Business Suite | Oct 6, 2025 | Oct 27, 2025 | Known |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability GNU / GNU Bash | Oct 2, 2025 | Oct 23, 2025 | |
| CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability Juniper / ScreenOS | Oct 2, 2025 | Oct 23, 2025 | |
| CVE-2017-1000353 | Jenkins Remote Code Execution Vulnerability Jenkins / Jenkins | Oct 2, 2025 | Oct 23, 2025 | |
| CVE-2025-21043 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung / Mobile Devices | Oct 2, 2025 | Oct 23, 2025 | |
| CVE-2025-4008 | Smartbedded Meteobridge Command Injection Vulnerability Smartbedded / Meteobridge | Oct 2, 2025 | Oct 23, 2025 | |
| CVE-2021-21311 | Adminer Server-Side Request Forgery Vulnerability Adminer / Adminer | Sep 29, 2025 | Oct 20, 2025 | |
| CVE-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra / GoAnywhere MFT | Sep 29, 2025 | Oct 20, 2025 | Known |
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco / IOS and IOS XE | Sep 29, 2025 | Oct 20, 2025 | |
| CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo / Sudo | Sep 29, 2025 | Oct 20, 2025 | |
| CVE-2025-59689 | Libraesva Email Security Gateway Command Injection Vulnerability Libraesva / Email Security Gateway | Sep 29, 2025 | Oct 20, 2025 | |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | |
| CVE-2025-10585 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Sep 23, 2025 | Oct 14, 2025 | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes / DELMIA Apriso | Sep 11, 2025 | Oct 2, 2025 | |
| CVE-2025-38352 | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux / Kernel | Sep 4, 2025 | Sep 25, 2025 | |
| CVE-2025-48543 | Android Runtime Use-After-Free Vulnerability Android / Runtime | Sep 4, 2025 | Sep 25, 2025 | |
| CVE-2025-53690 | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore / Multiple Products | Sep 4, 2025 | Sep 25, 2025 | |
| CVE-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link / TL-WR841N | Sep 3, 2025 | Sep 24, 2025 | |
| CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link / Multiple Routers | Sep 3, 2025 | Sep 24, 2025 | |
| CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link / TL-WA855RE | Sep 2, 2025 | Sep 23, 2025 | |
| CVE-2025-55177 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms / WhatsApp | Sep 2, 2025 | Sep 23, 2025 | |
| CVE-2025-57819 | Sangoma FreePBX Authentication Bypass Vulnerability Sangoma / FreePBX | Aug 29, 2025 | Sep 19, 2025 | |
| CVE-2025-7775 | Citrix NetScaler Memory Overflow Vulnerability Citrix / NetScaler | Aug 26, 2025 | Aug 28, 2025 | |
| CVE-2024-8068 | Citrix Session Recording Improper Privilege Management Vulnerability Citrix / Session Recording | Aug 25, 2025 | Sep 15, 2025 | |
| CVE-2024-8069 | Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix / Session Recording | Aug 25, 2025 | Sep 15, 2025 | |
| CVE-2025-48384 | Git Link Following Vulnerability Git / Git | Aug 25, 2025 | Sep 15, 2025 | |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple / iOS, iPadOS, and macOS | Aug 21, 2025 | Sep 11, 2025 | |
| CVE-2025-54948 | Trend Micro Apex One OS Command Injection Vulnerability Trend Micro / Apex One | Aug 18, 2025 | Sep 8, 2025 | |
| CVE-2025-8875 | N-able N-Central Insecure Deserialization Vulnerability N-able / N-Central | Aug 13, 2025 | Aug 20, 2025 | |
| CVE-2025-8876 | N-able N-Central Command Injection Vulnerability N-able / N-Central | Aug 13, 2025 | Aug 20, 2025 | |
| CVE-2007-0671 | Microsoft Office Excel Remote Code Execution Vulnerability Microsoft / Office | Aug 12, 2025 | Sep 2, 2025 | |
| CVE-2013-3893 | Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft / Internet Explorer | Aug 12, 2025 | Sep 2, 2025 | |
| CVE-2025-8088 | RARLAB WinRAR Path Traversal Vulnerability RARLAB / WinRAR | Aug 12, 2025 | Sep 2, 2025 | Known |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link / DNR-322L | Aug 5, 2025 | Aug 26, 2025 | |
| CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut / NG/MF | Jul 28, 2025 | Aug 18, 2025 | |
| CVE-2025-20281 | Cisco Identity Services Engine Injection Vulnerability Cisco / Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | |
| CVE-2025-20337 | Cisco Identity Services Engine Injection Vulnerability Cisco / Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | |
| CVE-2025-2775 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid / SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | |
| CVE-2025-2776 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid / SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | |
| CVE-2025-49704 | Microsoft SharePoint Code Injection Vulnerability Microsoft / SharePoint | Jul 22, 2025 | Jul 23, 2025 | Known |
| CVE-2025-49706 | Microsoft SharePoint Improper Authentication Vulnerability Microsoft / SharePoint | Jul 22, 2025 | Jul 23, 2025 | Known |
| CVE-2025-54309 | CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP / CrushFTP | Jul 22, 2025 | Aug 12, 2025 | |
| CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google / Chromium | Jul 22, 2025 | Aug 12, 2025 | |
| CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 20, 2025 | Jul 21, 2025 | Known |
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability Fortinet / FortiWeb | Jul 18, 2025 | Aug 8, 2025 | |
| CVE-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server / Wing FTP Server | Jul 14, 2025 | Aug 4, 2025 | |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix / NetScaler ADC and Gateway | Jul 10, 2025 | Jul 11, 2025 | Known |
| CVE-2014-3931 | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass / Multi-Router Looking Glass (MRLG) | Jul 7, 2025 | Jul 28, 2025 | |
| CVE-2016-10033 | PHPMailer Command Injection Vulnerability PHP / PHPMailer | Jul 7, 2025 | Jul 28, 2025 | |
| CVE-2019-5418 | Rails Ruby on Rails Path Traversal Vulnerability Rails / Ruby on Rails | Jul 7, 2025 | Jul 28, 2025 | |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Jul 7, 2025 | Jul 28, 2025 | |
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Jul 2, 2025 | Jul 23, 2025 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses