Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2025-41244 | Broadcom | VMware Aria Operations and VMware Tools | 7.8 High | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 2025-10-30 | 2025-11-20 | Unknown |
| CVE-2025-24893 | XWiki | Platform | 9.8 Critical | XWiki Platform Eval Injection Vulnerability | 2025-10-30 | 2025-11-20 | Unknown |
| CVE-2025-6205 | Dassault Systèmes | DELMIA Apriso | 9.1 Critical | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | 2025-10-28 | 2025-11-18 | Unknown |
| CVE-2025-6204 | Dassault Systèmes | DELMIA Apriso | 8.0 High | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | 2025-10-28 | 2025-11-18 | Unknown |
| CVE-2025-59287 | Microsoft | Windows | 9.8 Critical | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 2025-10-24 | 2025-11-14 | Unknown |
| CVE-2025-54236 | Adobe | Commerce and Magento | 9.1 Critical | Adobe Commerce and Magento Improper Input Validation Vulnerability | 2025-10-24 | 2025-11-14 | Unknown |
| CVE-2025-61932 | Motex | LANSCOPE Endpoint Manager | 9.3 Critical | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | 2025-10-22 | 2025-11-12 | Unknown |
| CVE-2025-61884 | Oracle | E-Business Suite | 7.5 High | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 2025-10-20 | 2025-11-10 | Known |
| CVE-2025-33073 | Microsoft | Windows | 8.8 High | Microsoft Windows SMB Client Improper Access Control Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-2747 | Kentico | Xperience CMS | 9.8 Critical | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-2746 | Kentico | Xperience CMS | 9.8 Critical | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2022-48503 | Apple | Multiple Products | 8.8 High | Apple Multiple Products Unspecified Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-54253 | Adobe | Experience Manager (AEM) Forms | 10.0 Critical | Adobe Experience Manager Forms Code Execution Vulnerability | 2025-10-15 | 2025-11-05 | Unknown |
| CVE-2025-59230 | Microsoft | Windows | 7.8 High | Microsoft Windows Improper Access Control Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2025-47827 | IGEL | IGEL OS | 4.6 Medium | IGEL OS Use of a Key Past its Expiration Date Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2025-24990 | Microsoft | Windows | 7.8 High | Microsoft Windows Untrusted Pointer Dereference Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2016-7836 | SKYSEA | Client View | 9.8 Critical | SKYSEA Client View Improper Authentication Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2021-43798 | Grafana Labs | Grafana | 7.5 High | Grafana Path Traversal Vulnerability | 2025-10-09 | 2025-10-30 | Unknown |
| CVE-2025-27915 | Synacor | Zimbra Collaboration Suite (ZCS) | 5.4 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 2025-10-07 | 2025-10-28 | Unknown |
| CVE-2025-61882 | Oracle | E-Business Suite | 9.8 Critical | Oracle E-Business Suite Unspecified Vulnerability | 2025-10-06 | 2025-10-27 | Known |
| CVE-2021-43226 | Microsoft | Windows | 7.8 High | Microsoft Windows Privilege Escalation Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2021-22555 | Linux | Kernel | 7.8 High | Linux Kernel Heap Out-of-Bounds Write Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2013-3918 | Microsoft | Windows | 8.8 High | Microsoft Windows Out-of-Bounds Write Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2011-3402 | Microsoft | Windows | 8.8 High | Microsoft Windows Remote Code Execution Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2010-3962 | Microsoft | Internet Explorer | 8.1 High | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2010-3765 | Mozilla | Multiple Products | 9.8 Critical | Mozilla Multiple Products Remote Code Execution Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2025-4008 | Smartbedded | Meteobridge | 8.7 High | Smartbedded Meteobridge Command Injection Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2025-21043 | Samsung | Mobile Devices | 9.8 Critical | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2017-1000353 | Jenkins | Jenkins | 9.8 Critical | Jenkins Remote Code Execution Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2015-7755 | Juniper | ScreenOS | 9.8 Critical | Juniper ScreenOS Improper Authentication Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2014-6278 | GNU | GNU Bash | 8.8 High | GNU Bash OS Command Injection Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2025-59689 | Libraesva | Email Security Gateway | 6.1 Medium | Libraesva Email Security Gateway Command Injection Vulnerability | 2025-09-29 | 2025-10-20 | Unknown |
| CVE-2025-32463 | Sudo | Sudo | 7.8 High | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 2025-09-29 | 2025-10-20 | Unknown |
| CVE-2025-20352 | Cisco | IOS and IOS XE | 7.7 High | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 2025-09-29 | 2025-10-20 | Unknown |
| CVE-2025-10035 | Fortra | GoAnywhere MFT | 9.8 Critical | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 2025-09-29 | 2025-10-20 | Known |
| CVE-2021-21311 | Adminer | Adminer | 7.2 High | Adminer Server-Side Request Forgery Vulnerability | 2025-09-29 | 2025-10-20 | Unknown |
| CVE-2025-20362 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 8.6 High | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 2025-09-25 | 2025-09-26 | Unknown |
| CVE-2025-20333 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 9.9 Critical | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 2025-09-25 | 2025-09-26 | Unknown |
| CVE-2025-10585 | Chromium V8 | 9.8 Critical | Google Chromium V8 Type Confusion Vulnerability | 2025-09-23 | 2025-10-14 | Unknown | |
| CVE-2025-5086 | Dassault Systèmes | DELMIA Apriso | 9.0 Critical | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 2025-09-11 | 2025-10-02 | Unknown |
| CVE-2025-53690 | Sitecore | Multiple Products | 9.0 Critical | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 2025-09-04 | 2025-09-25 | Unknown |
| CVE-2025-48543 | Android | Runtime | 8.8 High | Android Runtime Use-After-Free Vulnerability | 2025-09-04 | 2025-09-25 | Unknown |
| CVE-2025-38352 | Linux | Kernel | 7.4 High | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 2025-09-04 | 2025-09-25 | Unknown |
| CVE-2025-9377 | TP-Link | Multiple Routers | 8.6 High | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 2025-09-03 | 2025-09-24 | Unknown |
| CVE-2023-50224 | TP-Link | TL-WR841N | 6.5 Medium | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 2025-09-03 | 2025-09-24 | Unknown |
| CVE-2025-55177 | Meta Platforms | 5.4 Medium | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | 2025-09-02 | 2025-09-23 | Unknown | |
| CVE-2020-24363 | TP-Link | TL-WA855RE | 8.8 High | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 2025-09-02 | 2025-09-23 | Unknown |
| CVE-2025-57819 | Sangoma | FreePBX | 10.0 Critical | Sangoma FreePBX Authentication Bypass Vulnerability | 2025-08-29 | 2025-09-19 | Unknown |
| CVE-2025-7775 | Citrix | NetScaler | 9.2 Critical | Citrix NetScaler Memory Overflow Vulnerability | 2025-08-26 | 2025-08-28 | Unknown |
| CVE-2025-48384 | Git | Git | 8.0 High | Git Link Following Vulnerability | 2025-08-25 | 2025-09-15 | Unknown |