Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 06:29 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2025-10585CH
Chrome
Google
9.8Sep 23Oct 14Google Chromium V8 Type Confusion Vulnerability
CVE-2025-5086DA
DELMIA Apriso
Dassault Systèmes
9.0Sep 11Oct 2Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-53690EM
Experience Manager (XM)
Sitecore
9.0Sep 4Sep 25Sitecore Products ViewState Deserialization Vulnerability
CVE-2025-48543AN
Android
Google
8.8Sep 4Sep 25Android Runtime Use-After-Free Vulnerability
CVE-2025-38352KE
Kernel
Linux
7.8Sep 4Sep 25posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
CVE-2025-9377AC
Archer C7(EU) V2
TP-Link Systems Inc.
7.2Sep 3Sep 24Authenticated RCE via Parental Control command injection
CVE-2023-50224AC
Archer C5
TP-Link
6.5Sep 3Sep 24TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
CVE-2020-24363TF
Tl-wa855re Firmware
Tp-link
8.8Sep 2Sep 23TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
CVE-2025-55177WB
WhatsApp Business for iOS
Facebook
5.4Sep 2Sep 23Meta Platforms WhatsApp Incorrect Authorization Vulnerability
CVE-2025-57819EN
endpoint
FreePBX
9.8Aug 29Sep 19FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
CVE-2025-7775NA
NetScaler ADC
Citrix
9.8Aug 26Aug 28Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
CVE-2024-8068CS
Citrix Session Recording
Citrix
8.0Aug 25Sep 15Privilege escalation to NetworkService Account access
CVE-2024-8069CS
Citrix Session Recording
Citrix Session Recording
8.0Aug 25Sep 15Limited remote code execution with privilege of a NetworkService Account access
CVE-2025-48384GI
git
git
8.0Aug 25Sep 15Git allows arbitrary code execution through broken config quoting
CVE-2025-43300IO
iOS
Apple
10.0Aug 21Sep 11Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVE-2025-54948AO
Apex One
Trend Micro
9.8Aug 18Sep 8Trend Micro Apex One OS Command Injection Vulnerability
CVE-2025-8876NC
N-central
N-able
8.8Aug 13Aug 20Command Injection Vulnerability
CVE-2025-8875NC
N-central
N-able
7.8Aug 13Aug 20Insecure Deserialization Vulnerability
CVE-2025-8088
Ransomware
WI
WinRAR
win.rar GmbH
8.8Aug 12Sep 2Path traversal vulnerability in WinRAR
CVE-2007-0671OF
Office
Microsoft
8.8Aug 12Sep 2Microsoft Office Excel Remote Code Execution Vulnerability
CVE-2013-3893IE
Internet Explorer
Microsoft
8.8Aug 12Sep 2Microsoft Internet Explorer Resource Management Errors Vulnerability
CVE-2020-25079DF
Dcs-2530l Firmware
Dlink
8.8Aug 5Aug 26D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
CVE-2022-40799DF
Dnr-322l Firmware
Dlink
8.8Aug 5Aug 26D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
CVE-2020-25078DF
Dcs-2530l Firmware
Dlink
7.5Aug 5Aug 26D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
CVE-2025-20281CI
Cisco Identity Services Engine Software
Cisco
10.0Jul 28Aug 18Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVE-2025-20337CI
Cisco Identity Services Engine Software
Cisco
10.0Jul 28Aug 18Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVE-2023-2533PM
PaperCut MF/NG
PaperCut
8.8Jul 28Aug 18PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
CVE-2025-2776SO
SysAid On-Prem
SysAid
9.8Jul 22Aug 12SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CVE-2025-54309CR
CrushFTP
CrushFTP
9.8Jul 22Aug 12 CrushFTP Unprotected Alternate Channel Vulnerability
CVE-2025-49704
Ransomware
SH
SharePoint
Microsoft
8.8Jul 22Jul 23Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-6558CH
Chrome
Google
8.8Jul 22Aug 12Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
CVE-2025-2775SO
SysAid On-Prem
SysAid
7.5Jul 22Aug 12SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVE-2025-49706
Ransomware
SH
SharePoint
Microsoft
6.5Jul 22Jul 23Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-53770
Ransomware
SH
SharePoint
Microsoft
9.8Jul 20Jul 21Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-25257FO
FortiWeb
Fortinet
9.8Jul 18Aug 8Fortinet FortiWeb SQL Injection Vulnerability
CVE-2025-47812WF
Wing FTP Server
wftpserver
10.0Jul 14Aug 4Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
CVE-2025-5777
Ransomware
NA
NetScaler ADC
Citrix
7.5Jul 10Jul 11NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
CVE-2016-10033JO
Joomla
Joomla
9.8Jul 7Jul 28The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
CVE-2014-3931ML
Multi-router Looking Glass
Multi-router Looking Glass Project
9.8Jul 7Jul 28Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
CVE-2019-9621ZC
Zimbra Collaboration Suite
Synacor
7.5Jul 7Jul 28Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
CVE-2019-5418HT
https://github.com/rails/rails
Rails
7.5Jul 7Jul 28Rails Ruby on Rails Path Traversal Vulnerability
CVE-2025-6554CH
Chrome
Google
8.1Jul 2Jul 23Google Chromium V8 Type Confusion Vulnerability
CVE-2025-48927SE
service
TeleMessage
5.3Jul 1Jul 22TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
CVE-2025-48928SE
service
TeleMessage
4.0Jul 1Jul 22TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
CVE-2025-6543NA
NetScaler ADC
Citrix
9.8Jun 30Jul 21Memory overflow vulnerability leading to unintended control flow and Denial of Service
CVE-2024-0769DI
DIR-859
D-Link
9.8Jun 25Jul 16D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
CVE-2024-54085ME
MegaRAC-SPx
AMI
9.8Jun 25Jul 16Redfish Authentication Bypass
CVE-2019-6693
Ransomware
FO
FortiOS
Fortinet
6.5Jun 25Jul 16Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
CVE-2023-0386KE
Kernel
Linux
7.8Jun 17Jul 8Linux Kernel Improper Ownership Management Vulnerability
CVE-2023-33538TF
Tl-wr740n Firmware
Tp-link
8.8Jun 16Jul 7TP-Link Multiple Routers Command Injection Vulnerability
Page 8 of 36 · 1,765 total
1…789…36