Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2025-58360 | OSGeo | GeoServer | 9.8 Critical | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | 2025-12-11 | 2026-01-01 | Unknown |
| CVE-2025-62221 | Microsoft | Windows | 7.8 High | Microsoft Windows Use After Free Vulnerability | 2025-12-09 | 2025-12-30 | Unknown |
| CVE-2025-6218 | RARLAB | WinRAR | 7.8 High | RARLAB WinRAR Path Traversal Vulnerability | 2025-12-09 | 2025-12-30 | Unknown |
| CVE-2025-66644 | Array Networks | ArrayOS AG | 9.8 Critical | Array Networks ArrayOS AG OS Command Injection Vulnerability | 2025-12-08 | 2025-12-29 | Unknown |
| CVE-2022-37055 | D-Link | Routers | 9.8 Critical | D-Link Routers Buffer Overflow Vulnerability | 2025-12-08 | 2025-12-29 | Unknown |
| CVE-2025-55182 | Meta | React Server Components | 10.0 Critical | Meta React Server Components Remote Code Execution Vulnerability | 2025-12-05 | 2025-12-12 | Known |
| CVE-2021-26828 | OpenPLC | ScadaBR | 8.8 High | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 2025-12-03 | 2025-12-24 | Unknown |
| CVE-2025-48633 | Android | Framework | 5.5 Medium | Android Framework Information Disclosure Vulnerability | 2025-12-02 | 2025-12-23 | Unknown |
| CVE-2025-48572 | Android | Framework | 7.8 High | Android Framework Privilege Escalation Vulnerability | 2025-12-02 | 2025-12-23 | Unknown |
| CVE-2021-26829 | OpenPLC | ScadaBR | 5.4 Medium | OpenPLC ScadaBR Cross-site Scripting Vulnerability | 2025-11-28 | 2025-12-19 | Unknown |
| CVE-2025-61757 | Oracle | Fusion Middleware | 9.8 Critical | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 2025-11-21 | 2025-12-12 | Unknown |
| CVE-2025-13223 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2025-11-19 | 2025-12-10 | Unknown | |
| CVE-2025-58034 | Fortinet | FortiWeb | 7.2 High | Fortinet FortiWeb OS Command Injection Vulnerability | 2025-11-18 | 2025-11-25 | Unknown |
| CVE-2025-64446 | Fortinet | FortiWeb | 9.8 Critical | Fortinet FortiWeb Path Traversal Vulnerability | 2025-11-14 | 2025-11-21 | Unknown |
| CVE-2025-9242 | WatchGuard | Firebox | 9.3 Critical | WatchGuard Firebox Out-of-Bounds Write Vulnerability | 2025-11-12 | 2025-12-03 | Unknown |
| CVE-2025-62215 | Microsoft | Windows | 7.0 High | Microsoft Windows Race Condition Vulnerability | 2025-11-12 | 2025-12-03 | Unknown |
| CVE-2025-12480 | Gladinet | Triofox | 9.1 Critical | Gladinet Triofox Improper Access Control Vulnerability | 2025-11-12 | 2025-12-03 | Unknown |
| CVE-2025-21042 | Samsung | Mobile Devices | 9.8 Critical | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 2025-11-10 | 2025-12-01 | Unknown |
| CVE-2025-48703 | CWP | Control Web Panel | 9.0 Critical | CWP Control Web Panel OS Command Injection Vulnerability | 2025-11-04 | 2025-11-25 | Unknown |
| CVE-2025-11371 | Gladinet | CentreStack and Triofox | 7.5 High | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | 2025-11-04 | 2025-11-25 | Unknown |
| CVE-2025-41244 | Broadcom | VMware Aria Operations and VMware Tools | 7.8 High | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 2025-10-30 | 2025-11-20 | Unknown |
| CVE-2025-24893 | XWiki | Platform | 9.8 Critical | XWiki Platform Eval Injection Vulnerability | 2025-10-30 | 2025-11-20 | Unknown |
| CVE-2025-6205 | Dassault Systèmes | DELMIA Apriso | 9.1 Critical | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | 2025-10-28 | 2025-11-18 | Unknown |
| CVE-2025-6204 | Dassault Systèmes | DELMIA Apriso | 8.0 High | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | 2025-10-28 | 2025-11-18 | Unknown |
| CVE-2025-59287 | Microsoft | Windows | 9.8 Critical | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 2025-10-24 | 2025-11-14 | Unknown |
| CVE-2025-54236 | Adobe | Commerce and Magento | 9.1 Critical | Adobe Commerce and Magento Improper Input Validation Vulnerability | 2025-10-24 | 2025-11-14 | Unknown |
| CVE-2025-61932 | Motex | LANSCOPE Endpoint Manager | 9.3 Critical | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | 2025-10-22 | 2025-11-12 | Unknown |
| CVE-2025-61884 | Oracle | E-Business Suite | 7.5 High | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 2025-10-20 | 2025-11-10 | Known |
| CVE-2025-33073 | Microsoft | Windows | 8.8 High | Microsoft Windows SMB Client Improper Access Control Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-2747 | Kentico | Xperience CMS | 9.8 Critical | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-2746 | Kentico | Xperience CMS | 9.8 Critical | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2022-48503 | Apple | Multiple Products | 8.8 High | Apple Multiple Products Unspecified Vulnerability | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-54253 | Adobe | Experience Manager (AEM) Forms | 10.0 Critical | Adobe Experience Manager Forms Code Execution Vulnerability | 2025-10-15 | 2025-11-05 | Unknown |
| CVE-2025-59230 | Microsoft | Windows | 7.8 High | Microsoft Windows Improper Access Control Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2025-47827 | IGEL | IGEL OS | 4.6 Medium | IGEL OS Use of a Key Past its Expiration Date Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2025-24990 | Microsoft | Windows | 7.8 High | Microsoft Windows Untrusted Pointer Dereference Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2016-7836 | SKYSEA | Client View | 9.8 Critical | SKYSEA Client View Improper Authentication Vulnerability | 2025-10-14 | 2025-11-04 | Unknown |
| CVE-2021-43798 | Grafana Labs | Grafana | 7.5 High | Grafana Path Traversal Vulnerability | 2025-10-09 | 2025-10-30 | Unknown |
| CVE-2025-27915 | Synacor | Zimbra Collaboration Suite (ZCS) | 5.4 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 2025-10-07 | 2025-10-28 | Unknown |
| CVE-2025-61882 | Oracle | E-Business Suite | 9.8 Critical | Oracle E-Business Suite Unspecified Vulnerability | 2025-10-06 | 2025-10-27 | Known |
| CVE-2021-43226 | Microsoft | Windows | 7.8 High | Microsoft Windows Privilege Escalation Vulnerability | 2025-10-06 | 2025-10-27 | Known |
| CVE-2021-22555 | Linux | Kernel | 7.8 High | Linux Kernel Heap Out-of-Bounds Write Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2013-3918 | Microsoft | Windows | 8.8 High | Microsoft Windows Out-of-Bounds Write Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2011-3402 | Microsoft | Windows | 8.8 High | Microsoft Windows Remote Code Execution Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2010-3962 | Microsoft | Internet Explorer | 8.1 High | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2010-3765 | Mozilla | Multiple Products | 9.8 Critical | Mozilla Multiple Products Remote Code Execution Vulnerability | 2025-10-06 | 2025-10-27 | Unknown |
| CVE-2025-4008 | Smartbedded | Meteobridge | 8.7 High | Smartbedded Meteobridge Command Injection Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2025-21043 | Samsung | Mobile Devices | 9.8 Critical | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2017-1000353 | Jenkins | Jenkins | 9.8 Critical | Jenkins Remote Code Execution Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |
| CVE-2015-7755 | Juniper | ScreenOS | 9.8 Critical | Juniper ScreenOS Improper Authentication Vulnerability | 2025-10-02 | 2025-10-23 | Unknown |