CISA Known Exploited Vulnerabilities Catalog

ronjor · Sep 11, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 11 Sep 2025

09/11/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 23, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 23 Sep 2025

Release Date September 23, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 29, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 29 Sep 2025

09/29/2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability
CVE-2025-20352 Cisco IOS and IOS XE Stack-based Buffer Overflow Vulnerability
CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
Click to expand...

CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 2, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 02 Oct 2025

Release Date October 02, 2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2014-6278 GNU Bash OS Command Injection Vulnerability
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability
Click to expand...

CVE-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability
CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 6, 2025

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Release Date October 06, 2025
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities
(KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability
CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability
CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability
Click to expand...

CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability
CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 7, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 07 Oct 2025

10/07/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 9, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 09 Oct 2025

10/09/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-43798 Grafana Path Traversal Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 14, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 14 Oct 2025

10/14/2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability
CVE-2025-6264 Rapid7 Velociraptor Incorrect Default Permissions Vulnerability
CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability
CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability
CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 15, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 15 Oct 2025

10/15/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 20, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 20 Oct 2025

Release Date October 20, 2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability
CVE-2025-2746 Kentico Xperience Staging Sync Server Digest Password Authentication Bypass Vulnerability
Click to expand...

CVE-2025-2747 Kentico Xperience Staging Sync Server None Password Type Authentication Bypass Vulnerability
CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability
CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 22, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 22 Oct 2025

10/22/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 24, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 24 Oct 2024

10/24/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability
CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
Click to expand...

These type of vulnerabilities are a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 28, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 28 Oct 2025

10/28/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 30, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 30 Oct 2025

10/30/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-24893 XWiki Platform Eval Injection Vulnerability
CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 4, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 04 Nov 2025

11/04/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 10, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 10 Nov 2025

11/10/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 12, 2025

CISA Adds Three Known Exploited Vulnerabilities to Catalog 12 Nov 2025

11/12/2025
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability
CVE-2025-62215 Microsoft Windows Race Condition Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 14, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 14 Nov 2025

11/14/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 18, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 18 Nov 2024

11/18/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-58034 Fortinet FortiWeb OS Command Code Injection Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 20, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 19 Nov 2025

11/19/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 21, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 21 Nov 2025

11/21/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Nov 28, 2025 at 1:54 PM

CISA Adds One Known Exploited Vulnerability to Catalog 28 Nov 2025

11/28/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

ronjor · Dec 2, 2025 at 3:18 PM

CISA Adds Two Known Exploited Vulnerabilities to Catalog 02 Dec 2025

December 02, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-48572 Android Framework Privilege Escalation Vulnerability
CVE-2025-48633 Android Framework Information Disclosure Vulnerability
Click to expand...

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches