Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 10:37 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2025-31161
Ransomware
CR
CrushFTP
CrushFTP
9.8Apr 7Apr 28CrushFTP Authentication Bypass Vulnerability
CVE-2025-22457
Ransomware
CS
Connect Secure
Ivanti
9.8Apr 4Apr 11Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVE-2025-24813TO
Tomcat
Apache
9.8Apr 1Apr 22Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVE-2024-20439CS
Cisco Smart License Utility
Cisco
9.8Mar 31Apr 21Cisco Smart Licensing Utility Static Credential Vulnerability
CVE-2025-2783CH
Chrome
Google
8.3Mar 27Apr 17Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2019-9874CM
Cms
Sitecore
9.8Mar 26Apr 16Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2019-9875CM
Cms
Sitecore
8.8Mar 26Apr 16Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2025-30154RE
reviewdog
reviewdog
8.6Mar 24Apr 14Multiple Reviewdog actions were compromised during a specific time period
CVE-2025-1316II
IC-7100 IP Camera
Edimax
9.8Mar 19Apr 9Edimax IC-7100 IP Camera OS Command Injection
CVE-2024-48248BR
Backup & Replication Director
NAKIVO
8.6Mar 19Apr 9NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVE-2017-12637NA
Netweaver Application Server Java
Sap
7.5Mar 19Apr 9SAP NetWeaver Directory Traversal Vulnerability
CVE-2025-30066CH
changed-files
tj-actions
8.6Mar 18Apr 8tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-24472
Ransomware
FO
FortiOS
Fortinet
8.1Mar 18Apr 8Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-24201IO
iOS
Apple
10.0Mar 13Apr 3Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVE-2025-21590JO
Junos OS
Juniper
4.4Mar 13Apr 3Junos OS: An local attacker with shell access can execute arbitrary code
CVE-2025-24993WI
Windows
Microsoft
7.8Mar 11Apr 1Windows NTFS Remote Code Execution Vulnerability
CVE-2025-24985WI
Windows
Microsoft
7.8Mar 11Apr 1Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVE-2025-24983WI
Windows
Microsoft
7.0Mar 11Apr 1Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-26633
Ransomware
WI
Windows
Microsoft
7.0Mar 11Apr 1Microsoft Management Console Security Feature Bypass Vulnerability
CVE-2025-24991WI
Windows
Microsoft
5.5Mar 11Apr 1Windows NTFS Information Disclosure Vulnerability
CVE-2025-24984WI
Windows
Microsoft
4.6Mar 11Apr 1Windows NTFS Information Disclosure Vulnerability
CVE-2024-57968VE
VeraCore
Advantive
8.8Mar 10Mar 31Advantive VeraCore Unrestricted File Upload Vulnerability
CVE-2024-13160EM
Endpoint Manager
Ivanti
7.5Mar 10Mar 31Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2025-25181VE
VeraCore
Advantive
7.5Mar 10Mar 31 Advantive VeraCore SQL Injection Vulnerability
CVE-2024-13159EM
Endpoint Manager
Ivanti
7.5Mar 10Mar 31Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2024-13161EM
Endpoint Manager
Ivanti
7.5Mar 10Mar 31Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2025-22225
Ransomware
ES
ESXi
VMware
8.2Mar 4Mar 25VMware ESXi Arbitrary Write Vulnerability
CVE-2025-22224ES
ESXi
VMware
8.2Mar 4Mar 25VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2025-22226ES
ESXi
VMware
6.0Mar 4Mar 25VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
CVE-2024-50302AN
Android
Google
5.5Mar 4Mar 25HID: core: zero-initialize the report buffer
CVE-2024-4885WG
WhatsUp Gold
Progress
9.8Mar 3Mar 24WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
CVE-2022-43939PB
Pentaho Business Analytics Server
Hitachi Vantara
9.8Mar 3Mar 24Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2018-8639
Ransomware
WI
Windows
Microsoft
7.8Mar 3Mar 24Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2023-20118CS
Cisco Small Business RV Series Router Firmware
Cisco
7.2Mar 3Mar 24Cisco Small Business RV Series Routers Command Injection Vulnerability
CVE-2022-43769PB
Pentaho Business Analytics Server
Hitachi Vantara
7.2Mar 3Mar 24Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
CVE-2024-49035MP
Microsoft Partner Center
Microsoft
9.8Feb 25Mar 18Partner.Microsoft.Com Elevation of Privilege Vulnerability
CVE-2023-34192ZC
Zimbra Collaboration Suite
Synacor
9.0Feb 25Mar 18Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2017-3066CO
ColdFusion
Adobe
9.8Feb 24Mar 17Adobe ColdFusion Deserialization Vulnerability
CVE-2024-20953AP
Agile PLM Framework
Oracle Corporation
8.8Feb 24Mar 17Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVE-2025-24989MP
Microsoft Power Pages
Microsoft
9.8Feb 21Mar 14Microsoft Power Pages Elevation of Privilege Vulnerability
CVE-2025-23209CM
cms
craftcms
8.1Feb 20Mar 13Potential RCE with a compromised security key in craft/cms
CVE-2025-0111PA
PAN-OS
Palo Alto Networks
6.5Feb 20Mar 13PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
CVE-2024-53704
Ransomware
SO
SonicOS
SonicWall
9.8Feb 18Mar 11SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVE-2025-0108PA
PAN-OS
Palo Alto Networks
9.1Feb 18Mar 11PAN-OS: Authentication Bypass in the Management Web Interface
CVE-2024-57727
Ransomware
SI
Simplehelp
Simple-help
7.5Feb 13Mar 6SimpleHelp Path Traversal Vulnerability
CVE-2024-417106S
6863i Sip Firmware
Mitel
7.2Feb 12Mar 5Mitel SIP Phones Argument Injection Vulnerability
CVE-2025-24200IO
iOS
Apple
6.1Feb 12Mar 5Apple iOS and iPadOS Incorrect Authorization Vulnerability
CVE-2024-40890VF
VMG4325-B10A firmware
Zyxel
8.8Feb 11Mar 4Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2024-40891VF
VMG4325-B10A firmware
Zyxel
8.8Feb 11Mar 4Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2025-21418WI
Windows
Microsoft
7.8Feb 11Mar 4Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Page 10 of 36 · 1,765 total
1…91011…36