Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2025-31201 | Apple | Multiple Products | 9.8 Critical | Apple Multiple Products Arbitrary Read and Write Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-31200 | Apple | Multiple Products | 9.8 Critical | Apple Multiple Products Memory Corruption Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-24054 | Microsoft | Windows | 5.4 Medium | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2021-20035 | SonicWall | SMA100 Appliances | 6.5 Medium | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-04-16 | 2025-05-07 | Unknown |
| CVE-2024-53197 | Linux | Kernel | 7.8 High | Linux Kernel Out-of-Bounds Access Vulnerability | 2025-04-09 | 2025-04-30 | Unknown |
| CVE-2024-53150 | Linux | Kernel | 7.1 High | Linux Kernel Out-of-Bounds Read Vulnerability | 2025-04-09 | 2025-04-30 | Unknown |
| CVE-2025-30406 | Gladinet | CentreStack | 9.8 Critical | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 2025-04-08 | 2025-04-29 | Unknown |
| CVE-2025-29824 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 2025-04-08 | 2025-04-29 | Known |
| CVE-2025-31161 | CrushFTP | CrushFTP | 9.8 Critical | CrushFTP Authentication Bypass Vulnerability | 2025-04-07 | 2025-04-28 | Known |
| CVE-2025-22457 | Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | 9.8 Critical | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 2025-04-04 | 2025-04-11 | Known |
| CVE-2025-24813 | Apache | Tomcat | 9.8 Critical | Apache Tomcat Path Equivalence Vulnerability | 2025-04-01 | 2025-04-22 | Unknown |
| CVE-2024-20439 | Cisco | Smart Licensing Utility | 9.8 Critical | Cisco Smart Licensing Utility Static Credential Vulnerability | 2025-03-31 | 2025-04-21 | Unknown |
| CVE-2025-2783 | Chromium Mojo | 8.3 High | Google Chromium Mojo Sandbox Escape Vulnerability | 2025-03-27 | 2025-04-17 | Unknown | |
| CVE-2019-9875 | Sitecore | CMS and Experience Platform (XP) | 8.8 High | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-03-26 | 2025-04-16 | Unknown |
| CVE-2019-9874 | Sitecore | CMS and Experience Platform (XP) | 9.8 Critical | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-03-26 | 2025-04-16 | Unknown |
| CVE-2025-30154 | reviewdog | action-setup GitHub Action | 8.6 High | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 2025-03-24 | 2025-04-14 | Unknown |
| CVE-2025-1316 | Edimax | IC-7100 IP Camera | 9.3 Critical | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2024-48248 | NAKIVO | Backup and Replication | 8.6 High | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2017-12637 | SAP | NetWeaver | 7.5 High | SAP NetWeaver Directory Traversal Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2025-30066 | tj-actions | changed-files GitHub Action | 8.6 High | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 2025-03-18 | 2025-04-08 | Unknown |
| CVE-2025-24472 | Fortinet | FortiOS and FortiProxy | 8.1 High | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-03-18 | 2025-04-08 | Known |
| CVE-2025-24201 | Apple | Multiple Products | 10.0 Critical | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 2025-03-13 | 2025-04-03 | Unknown |
| CVE-2025-21590 | Juniper | Junos OS | 6.7 Medium | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | 2025-03-13 | 2025-04-03 | Unknown |
| CVE-2025-26633 | Microsoft | Windows | 7.0 High | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | 2025-03-11 | 2025-04-01 | Known |
| CVE-2025-24993 | Microsoft | Windows | 7.8 High | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 2025-03-11 | 2025-04-01 | Unknown |
| CVE-2025-24991 | Microsoft | Windows | 5.5 Medium | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 2025-03-11 | 2025-04-01 | Unknown |
| CVE-2025-24985 | Microsoft | Windows | 7.8 High | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 2025-03-11 | 2025-04-01 | Unknown |
| CVE-2025-24984 | Microsoft | Windows | 4.6 Medium | Microsoft Windows NTFS Information Disclosure Vulnerability | 2025-03-11 | 2025-04-01 | Unknown |
| CVE-2025-24983 | Microsoft | Windows | 7.0 High | Microsoft Windows Win32k Use-After-Free Vulnerability | 2025-03-11 | 2025-04-01 | Unknown |
| CVE-2025-25181 | Advantive | VeraCore | 7.5 High | Advantive VeraCore SQL Injection Vulnerability | 2025-03-10 | 2025-03-31 | Unknown |
| CVE-2024-57968 | Advantive | VeraCore | 8.8 High | Advantive VeraCore Unrestricted File Upload Vulnerability | 2025-03-10 | 2025-03-31 | Unknown |
| CVE-2024-13161 | Ivanti | Endpoint Manager (EPM) | 7.5 High | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | 2025-03-31 | Unknown |
| CVE-2024-13160 | Ivanti | Endpoint Manager (EPM) | 7.5 High | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | 2025-03-31 | Unknown |
| CVE-2024-13159 | Ivanti | Endpoint Manager (EPM) | 7.5 High | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | 2025-03-31 | Unknown |
| CVE-2025-22226 | VMware | ESXi, Workstation, and Fusion | 6.0 Medium | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | 2025-03-04 | 2025-03-25 | Unknown |
| CVE-2025-22225 | VMware | ESXi | 8.2 High | VMware ESXi Arbitrary Write Vulnerability | 2025-03-04 | 2025-03-25 | Known |
| CVE-2025-22224 | VMware | ESXi and Workstation | 8.2 High | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 2025-03-04 | 2025-03-25 | Unknown |
| CVE-2024-50302 | Linux | Kernel | 5.5 Medium | Linux Kernel Use of Uninitialized Resource Vulnerability | 2025-03-04 | 2025-03-25 | Unknown |
| CVE-2024-4885 | Progress | WhatsUp Gold | 9.8 Critical | Progress WhatsUp Gold Path Traversal Vulnerability | 2025-03-03 | 2025-03-24 | Unknown |
| CVE-2023-20118 | Cisco | Small Business RV Series Routers | 7.2 High | Cisco Small Business RV Series Routers Command Injection Vulnerability | 2025-03-03 | 2025-03-24 | Unknown |
| CVE-2022-43939 | Hitachi Vantara | Pentaho Business Analytics (BA) Server | 9.8 Critical | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | 2025-03-03 | 2025-03-24 | Unknown |
| CVE-2022-43769 | Hitachi Vantara | Pentaho Business Analytics (BA) Server | 7.2 High | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | 2025-03-03 | 2025-03-24 | Unknown |
| CVE-2018-8639 | Microsoft | Windows | 7.8 High | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | 2025-03-03 | 2025-03-24 | Known |
| CVE-2024-49035 | Microsoft | Partner Center | 9.8 Critical | Microsoft Partner Center Improper Access Control Vulnerability | 2025-02-25 | 2025-03-18 | Unknown |
| CVE-2023-34192 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.0 Critical | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2025-02-25 | 2025-03-18 | Unknown |
| CVE-2024-20953 | Oracle | Agile Product Lifecycle Management (PLM) | 8.8 High | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 2025-02-24 | 2025-03-17 | Unknown |
| CVE-2017-3066 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization Vulnerability | 2025-02-24 | 2025-03-17 | Unknown |
| CVE-2025-24989 | Microsoft | Power Pages | 9.8 Critical | Microsoft Power Pages Improper Access Control Vulnerability | 2025-02-21 | 2025-03-14 | Unknown |
| CVE-2025-23209 | Craft CMS | Craft CMS | 8.1 High | Craft CMS Code Injection Vulnerability | 2025-02-20 | 2025-03-13 | Unknown |
| CVE-2025-0111 | Palo Alto Networks | PAN-OS | 7.1 High | Palo Alto Networks PAN-OS File Read Vulnerability | 2025-02-20 | 2025-03-13 | Unknown |