Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 02:22 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2025-48633AN
Android
Google
5.5Dec 2Dec 23Android Framework Information Disclosure Vulnerability
CVE-2021-26829SC
Scadabr
Scadabr
5.4Nov 28Dec 19OpenPLC ScadaBR Cross-site Scripting Vulnerability
CVE-2025-61757FM
Fusion Middleware
Oracle
9.8Nov 21Dec 12Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVE-2025-13223CH
Chrome
Google
8.8Nov 19Dec 10Google Chromium V8 Type Confusion Vulnerability
CVE-2025-58034FO
FortiWeb
Fortinet
7.2Nov 18Nov 25Fortinet FortiWeb OS Command Injection Vulnerability
CVE-2025-64446FO
FortiWeb
Fortinet
9.8Nov 14Nov 21Fortinet FortiWeb Path Traversal Vulnerability
CVE-2025-9242FO
Fireware OS
WatchGuard
9.8Nov 12Dec 3WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVE-2025-12480TR
TrioFox
TrioFox
9.1Nov 12Dec 3Gladinet Triofox Improper Access Control Vulnerability
CVE-2025-62215WI
Windows
Microsoft
7.0Nov 12Dec 3Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-21042SM
Samsung Mobile Devices
Samsung Mobile
9.8Nov 10Dec 1Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVE-2025-48703CW
CentOS Web Panel
centos-webpanel
9.0Nov 4Nov 25CWP Control Web Panel OS Command Injection Vulnerability
CVE-2025-11371CA
CentreStack and TrioFox
Gladinet
7.5Nov 4Nov 25Gladinet CentreStack and TrioFox Local File Inclusion Flaw
CVE-2025-24893XW
xwiki-platform
xwiki
9.8Oct 30Nov 20Remote code execution as guest via SolrSearchMacros request in xwiki
CVE-2025-41244VO
VCF operations
VMware
7.8Oct 30Nov 20VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
CVE-2025-6205DA
DELMIA Apriso
Dassault Systèmes
9.1Oct 28Nov 18Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-6204DA
DELMIA Apriso
Dassault Systèmes
8.0Oct 28Nov 18Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-59287WI
Windows
Microsoft
9.8Oct 24Nov 14Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVE-2025-54236CO
Commerce
Adobe
9.1Oct 24Nov 14Adobe Commerce | Improper Input Validation (CWE-20)
CVE-2025-61932LE
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
MOTEX Inc.
9.8Oct 22Nov 12Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
CVE-2025-2747XP
Xperience
Kentico
9.8Oct 20Nov 10Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
CVE-2025-2746XP
Xperience
Kentico
9.8Oct 20Nov 10Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
CVE-2022-48503MA
macOS
Apple
8.8Oct 20Nov 10Apple Multiple Products Unspecified Vulnerability
CVE-2025-33073WI
Windows
Microsoft
8.8Oct 20Nov 10Windows SMB Client Elevation of Privilege Vulnerability
CVE-2025-61884
Ransomware
OC
Oracle Configurator
Oracle Corporation
7.5Oct 20Nov 10Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
CVE-2025-54253AE
Adobe Experience Manager
Adobe
10.0Oct 15Nov 5Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVE-2016-7836SC
SKYSEA Client View
Sky Co., LTD.
9.8Oct 14Nov 4SKYSEA Client View Improper Authentication Vulnerability
CVE-2025-24990WI
Windows
Microsoft
7.8Oct 14Nov 4Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVE-2025-59230WI
Windows
Microsoft
7.8Oct 14Nov 4Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2025-47827IO
Igel OS
Igel
4.6Oct 14Nov 4IGEL OS Use of a Key Past its Expiration Date Vulnerability
CVE-2021-43798GR
Grafana
Grafana
7.5Oct 9Oct 30Grafana path traversal
CVE-2025-27915ZC
Zimbra Collaboration Suite
Synacor
5.4Oct 7Oct 28Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVE-2010-3765FI
Firefox
Mozilla
9.8Oct 6Oct 27Mozilla Multiple Products Remote Code Execution Vulnerability
CVE-2025-61882
Ransomware
OC
Oracle Concurrent Processing
Oracle Corporation
9.8Oct 6Oct 27Oracle E-Business Suite Unspecified Vulnerability
CVE-2011-3402WI
Windows
Microsoft
8.8Oct 6Oct 27Microsoft Windows Remote Code Execution Vulnerability
CVE-2013-3918WI
Windows
Microsoft
8.8Oct 6Oct 27Microsoft Windows Out-of-Bounds Write Vulnerability
CVE-2010-3962IE
Internet Explorer
Microsoft
8.1Oct 6Oct 27Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
CVE-2021-43226
Ransomware
WI
Windows
Microsoft
7.8Oct 6Oct 27Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-22555KE
Kernel
Linux
7.8Oct 6Oct 27Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
CVE-2025-21043SM
Samsung Mobile Devices
Samsung Mobile
9.8Oct 2Oct 23Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVE-2015-7755SC
Screenos
Juniper
9.8Oct 2Oct 23Juniper ScreenOS Improper Authentication Vulnerability
CVE-2017-1000353JE
Jenkins
Jenkins
9.8Oct 2Oct 23Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution
CVE-2025-4008ME
MeteoBridge
Smartbedded
8.8Oct 2Oct 23Arbitrary Command Injection in Smartbedded MeteoBridge
CVE-2014-6278BA
Bash
Gnu
8.8Oct 2Oct 23GNU Bash OS Command Injection Vulnerability
CVE-2025-10035
Ransomware
GM
GoAnywhere MFT
Fortra
9.8Sep 29Oct 20Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVE-2025-32463SU
Sudo
Sudo project
7.8Sep 29Oct 20Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2025-20352IX
IOS XE
Cisco
7.7Sep 29Oct 20Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
CVE-2021-21311AD
adminer
vrana
7.2Sep 29Oct 20SSRF in adminer
CVE-2025-59689ES
Email Security Gateway
Libraesva
6.1Sep 29Oct 20Libraesva Email Security Gateway Command Injection Vulnerability
CVE-2025-20333CS
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco
9.9Sep 25Sep 26Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVE-2025-20362CS
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco
8.6Sep 25Sep 26Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
Page 7 of 36 · 1,765 total
1…678…36