Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 07:54 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2025-43200IO
iOS
Apple
4.2Jun 16Jul 7Apple Multiple Products Unspecified Vulnerability
CVE-2025-24016WA
wazuh
wazuh
9.9Jun 10Jul 1Remote code execution in Wazuh server
CVE-2025-33053WI
Windows
Microsoft
8.8Jun 10Jul 1Internet Shortcut Files Remote Code Execution Vulnerability
CVE-2025-32433OT
otp
erlang
10.0Jun 9Jun 30Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
CVE-2024-42009WE
Webmail
Roundcube
9.3Jun 9Jun 30RoundCube Webmail Cross-Site Scripting Vulnerability
CVE-2025-5419CH
Chrome
Google
8.8Jun 5Jun 26Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVE-2025-21480SN
Snapdragon
Qualcomm, Inc.
8.6Jun 3Jun 24Incorrect Authorization in Graphics Windows
CVE-2025-21479SN
Snapdragon
Qualcomm, Inc.
8.6Jun 3Jun 24Incorrect Authorization in Graphics
CVE-2025-27038SN
Snapdragon
Qualcomm, Inc.
7.5Jun 3Jun 24Use After Free in Graphics
CVE-2024-56145CM
cms
craftcms
9.8Jun 2Jun 23RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
CVE-2021-32030GF
Gt-ac2900 Firmware
Asus
9.8Jun 2Jun 23ASUS Routers Improper Authentication Vulnerability
CVE-2023-39780RT
RT-AX55
ASUS
8.8Jun 2Jun 23ASUS RT-AX55 Routers OS Command Injection Vulnerability
CVE-2025-3935SC
ScreenConnect
ConnectWise
7.2Jun 2Jun 23ScreenConnect Exposure to ASP.NET ViewState Code Injection
CVE-2025-35939CM
CMS
Craft
5.3Jun 2Jun 23Craft CMS stores user-provided content in session files
CVE-2025-4632M9
MagicINFO 9 Server
Samsung Electronics
9.8May 22Jun 12Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVE-2025-4428EM
Endpoint Manager Mobile
Ivanti
8.8May 19Jun 9Remote Code Execution
CVE-2025-27920OM
Output Messenger
Srimax
8.8May 19Jun 9Srimax Output Messenger Directory Traversal Vulnerability
CVE-2025-4427EM
Endpoint Manager Mobile
Ivanti
7.5May 19Jun 9Authentication Bypass
CVE-2023-38950BI
Biotime
Zkteco
7.5May 19Jun 9ZKTeco BioTime Path Traversal Vulnerability
CVE-2024-11182ES
Email Server
MDaemon
6.1May 19Jun 9Stored XSS vulnerability in MDaemon Email Server
CVE-2024-27443CO
Collaboration
Zimbra
6.1May 19Jun 9Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2024-12987VI
Vigor2960
DrayTek
9.8May 15Jun 5DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
CVE-2025-42999
Ransomware
SN
SAP NetWeaver (Visual Composer development server)
SAP_SE
9.1May 15Jun 5Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVE-2025-32756FO
FortiCamera
Fortinet
9.8May 14Jun 4Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVE-2025-32706WI
Windows
Microsoft
7.8May 13Jun 3Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-30400WI
Windows
Microsoft
7.8May 13Jun 3Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-32701WI
Windows
Microsoft
7.8May 13Jun 3Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-32709WI
Windows
Microsoft
7.8May 13Jun 3Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-30397WI
Windows
Microsoft
7.5May 13Jun 3Scripting Engine Memory Corruption Vulnerability
CVE-2025-47729AB
archiving backend
TeleMessage
4.9May 12Jun 2TeleMessage TM SGNL Hidden Functionality Vulnerability
CVE-2024-11120GV
GV-DSP_LPR_V3
GeoVision
9.8May 7May 28GeoVision EOL devices - OS Command Injection
CVE-2024-6047GV
GV VS04A
GeoVision
9.8May 7May 28GeoVision EOL device - OS Command Injection
CVE-2025-27363FR
FreeType
FreeType
8.1May 6May 27FreeType Out-of-Bounds Write Vulnerability
CVE-2025-3248
Ransomware
LA
langflow
langflow-ai
9.8May 5May 26Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVE-2025-34028CC
Command Center Innovation Release
Commvault
10.0May 2May 23Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CVE-2024-58136YI
Yii
yiiframework
9.8May 2May 23Yiiframework Yii Improper Protection of Alternate Path Vulnerability
CVE-2024-38475HS
HTTP Server
Apache
9.1May 1May 22Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
CVE-2023-44221SM
SMA
SonicWall
7.2May 1May 22SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2025-31324
Ransomware
SN
SAP NetWeaver (Visual Composer development server)
SAP_SE
9.8Apr 29May 20Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVE-2025-42599AM
Active! mail 6
QUALITIA CO., LTD.
9.8Apr 28May 19Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
CVE-2025-3928WS
Web Server
Commvault
8.8Apr 28May 19Commvault Web Server unspecified vulnerability
CVE-2025-1976FO
Fabric OS
Brocade
6.7Apr 28May 19Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
CVE-2025-31200MA
macOS
Apple
9.8Apr 17May 8Apple Multiple Products Memory Corruption Vulnerability
CVE-2025-31201MA
macOS
Apple
9.8Apr 17May 8Apple Multiple Products Arbitrary Read and Write Vulnerability
CVE-2025-24054WI
Windows
Microsoft
5.4Apr 17May 8NTLM Hash Disclosure Spoofing Vulnerability
CVE-2021-20035SM
SMA
SonicWall
6.5Apr 16May 7SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2024-53197KE
Kernel
Linux
7.8Apr 9Apr 30ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVE-2024-53150KE
Kernel
Linux
7.1Apr 9Apr 30ALSA: usb-audio: Fix out of bounds reads when finding clock sources
CVE-2025-30406CE
CentreStack
Gladinet
9.8Apr 8Apr 29Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
CVE-2025-29824
Ransomware
WI
Windows
Microsoft
7.8Apr 8Apr 29Windows Common Log File System Driver Elevation of Privilege Vulnerability
Page 9 of 36 · 1,765 total
1…8910…36