Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,773 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.09. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2025-48927 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage / TM SGNL | Jul 1, 2025 | Jul 22, 2025 | |
| CVE-2025-48928 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage / TM SGNL | Jul 1, 2025 | Jul 22, 2025 | |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix / NetScaler ADC and Gateway | Jun 30, 2025 | Jul 21, 2025 | |
| CVE-2019-6693 | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet / FortiOS | Jun 25, 2025 | Jul 16, 2025 | Known |
| CVE-2024-0769 | D-Link DIR-859 Router Path Traversal Vulnerability D-Link / DIR-859 Router | Jun 25, 2025 | Jul 16, 2025 | |
| CVE-2024-54085 | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI / MegaRAC SPx | Jun 25, 2025 | Jul 16, 2025 | |
| CVE-2023-0386 | Linux Kernel Improper Ownership Management Vulnerability Linux / Kernel | Jun 17, 2025 | Jul 8, 2025 | |
| CVE-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability TP-Link / Multiple Routers | Jun 16, 2025 | Jul 7, 2025 | |
| CVE-2025-43200 | Apple Multiple Products Unspecified Vulnerability Apple / Multiple Products | Jun 16, 2025 | Jul 7, 2025 | |
| CVE-2025-24016 | Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh / Wazuh Server | Jun 10, 2025 | Jul 1, 2025 | |
| CVE-2025-33053 | Microsoft Windows External Control of File Name or Path Vulnerability Microsoft / Windows | Jun 10, 2025 | Jul 1, 2025 | |
| CVE-2024-42009 | RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube / Webmail | Jun 9, 2025 | Jun 30, 2025 | |
| CVE-2025-32433 | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang / Erlang/OTP | Jun 9, 2025 | Jun 30, 2025 | |
| CVE-2025-5419 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google / Chromium V8 | Jun 5, 2025 | Jun 26, 2025 | |
| CVE-2025-21479 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | |
| CVE-2025-21480 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | |
| CVE-2025-27038 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | |
| CVE-2021-32030 | ASUS Routers Improper Authentication Vulnerability ASUS / Routers | Jun 2, 2025 | Jun 23, 2025 | |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS / RT-AX55 Routers | Jun 2, 2025 | Jun 23, 2025 | |
| CVE-2024-56145 | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Jun 2, 2025 | Jun 23, 2025 | |
| CVE-2025-35939 | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS / Craft CMS | Jun 2, 2025 | Jun 23, 2025 | |
| CVE-2025-3935 | ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise / ScreenConnect | Jun 2, 2025 | Jun 23, 2025 | |
| CVE-2025-4632 | Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung / MagicINFO 9 Server | May 22, 2025 | Jun 12, 2025 | |
| CVE-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability ZKTeco / BioTime | May 19, 2025 | Jun 9, 2025 | |
| CVE-2024-11182 | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon / Email Server | May 19, 2025 | Jun 9, 2025 | |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | May 19, 2025 | Jun 9, 2025 | |
| CVE-2025-27920 | Srimax Output Messenger Directory Traversal Vulnerability Srimax / Output Messenger | May 19, 2025 | Jun 9, 2025 | |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | |
| CVE-2024-12987 | DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek / Vigor Routers | May 15, 2025 | Jun 5, 2025 | |
| CVE-2025-42999 | SAP NetWeaver Deserialization Vulnerability SAP / NetWeaver | May 15, 2025 | Jun 5, 2025 | Known |
| CVE-2025-32756 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet / Multiple Products | May 14, 2025 | Jun 4, 2025 | |
| CVE-2025-30397 | Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | |
| CVE-2025-30400 | Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | |
| CVE-2025-32701 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | |
| CVE-2025-32706 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | |
| CVE-2025-32709 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | |
| CVE-2025-47729 | TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage / TM SGNL | May 12, 2025 | Jun 2, 2025 | |
| CVE-2024-11120 | GeoVision Devices OS Command Injection Vulnerability GeoVision / Multiple Devices | May 7, 2025 | May 28, 2025 | |
| CVE-2024-6047 | GeoVision Devices OS Command Injection Vulnerability GeoVision / Multiple Devices | May 7, 2025 | May 28, 2025 | |
| CVE-2025-27363 | FreeType Out-of-Bounds Write Vulnerability FreeType / FreeType | May 6, 2025 | May 27, 2025 | |
| CVE-2025-3248 | Langflow Missing Authentication Vulnerability Langflow / Langflow | May 5, 2025 | May 26, 2025 | Known |
| CVE-2024-58136 | Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework / Yii | May 2, 2025 | May 23, 2025 | |
| CVE-2025-34028 | Commvault Command Center Path Traversal Vulnerability Commvault / Command Center | May 2, 2025 | May 23, 2025 | |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall / SMA100 Appliances | May 1, 2025 | May 22, 2025 | |
| CVE-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability Apache / HTTP Server | May 1, 2025 | May 22, 2025 | |
| CVE-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability SAP / NetWeaver | Apr 29, 2025 | May 20, 2025 | Known |
| CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom / Brocade Fabric OS | Apr 28, 2025 | May 19, 2025 | |
| CVE-2025-3928 | Commvault Web Server Unspecified Vulnerability Commvault / Web Server | Apr 28, 2025 | May 19, 2025 | |
| CVE-2025-42599 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia / Active! Mail | Apr 28, 2025 | May 19, 2025 | |
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft / Windows | Apr 17, 2025 | May 8, 2025 | |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Apr 17, 2025 | May 8, 2025 | |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability Apple / Multiple Products | Apr 17, 2025 | May 8, 2025 | |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall / SMA100 Appliances | Apr 16, 2025 | May 7, 2025 | |
| CVE-2024-53150 | Linux Kernel Out-of-Bounds Read Vulnerability Linux / Kernel | Apr 9, 2025 | Apr 30, 2025 | |
| CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability Linux / Kernel | Apr 9, 2025 | Apr 30, 2025 | |
| CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft / Windows | Apr 8, 2025 | Apr 29, 2025 | Known |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet / CentreStack | Apr 8, 2025 | Apr 29, 2025 | |
| CVE-2025-31161 | CrushFTP Authentication Bypass Vulnerability CrushFTP / CrushFTP | Apr 7, 2025 | Apr 28, 2025 | Known |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti / Connect Secure, Policy Secure, and ZTA Gateways | Apr 4, 2025 | Apr 11, 2025 | Known |
| CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability Apache / Tomcat | Apr 1, 2025 | Apr 22, 2025 | |
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability Cisco / Smart Licensing Utility | Mar 31, 2025 | Apr 21, 2025 | |
| CVE-2025-2783 | Google Chromium Mojo Sandbox Escape Vulnerability Google / Chromium Mojo | Mar 27, 2025 | Apr 17, 2025 | |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore / CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore / CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | |
| CVE-2025-30154 | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog / action-setup GitHub Action | Mar 24, 2025 | Apr 14, 2025 | |
| CVE-2017-12637 | SAP NetWeaver Directory Traversal Vulnerability SAP / NetWeaver | Mar 19, 2025 | Apr 9, 2025 | |
| CVE-2024-48248 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO / Backup and Replication | Mar 19, 2025 | Apr 9, 2025 | |
| CVE-2025-1316 | Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax / IC-7100 IP Camera | Mar 19, 2025 | Apr 9, 2025 | |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet / FortiOS and FortiProxy | Mar 18, 2025 | Apr 8, 2025 | Known |
| CVE-2025-30066 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions / changed-files GitHub Action | Mar 18, 2025 | Apr 8, 2025 | |
| CVE-2025-21590 | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper / Junos OS | Mar 13, 2025 | Apr 3, 2025 | |
| CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple / Multiple Products | Mar 13, 2025 | Apr 3, 2025 | |
| CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | |
| CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | |
| CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | |
| CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | Known |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | |
| CVE-2024-57968 | Advantive VeraCore Unrestricted File Upload Vulnerability Advantive / VeraCore | Mar 10, 2025 | Mar 31, 2025 | |
| CVE-2025-25181 | Advantive VeraCore SQL Injection Vulnerability Advantive / VeraCore | Mar 10, 2025 | Mar 31, 2025 | |
| CVE-2024-50302 | Linux Kernel Use of Uninitialized Resource Vulnerability Linux / Kernel | Mar 4, 2025 | Mar 25, 2025 | |
| CVE-2025-22224 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware / ESXi and Workstation | Mar 4, 2025 | Mar 25, 2025 | |
| CVE-2025-22225 | VMware ESXi Arbitrary Write Vulnerability VMware / ESXi | Mar 4, 2025 | Mar 25, 2025 | Known |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware / ESXi, Workstation, and Fusion | Mar 4, 2025 | Mar 25, 2025 | |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft / Windows | Mar 3, 2025 | Mar 24, 2025 | Known |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco / Small Business RV Series Routers | Mar 3, 2025 | Mar 24, 2025 | |
| CVE-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability Progress / WhatsUp Gold | Mar 3, 2025 | Mar 24, 2025 | |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Feb 25, 2025 | Mar 18, 2025 | |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability Microsoft / Partner Center | Feb 25, 2025 | Mar 18, 2025 | |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability Adobe / ColdFusion | Feb 24, 2025 | Mar 17, 2025 | |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle / Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | Mar 17, 2025 | |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability Microsoft / Power Pages | Feb 21, 2025 | Mar 14, 2025 | |
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks / PAN-OS | Feb 20, 2025 | Mar 13, 2025 | |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Feb 20, 2025 | Mar 13, 2025 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses