Known exploited vulnerabilities classified as CWE-125
Entries17
Ransomware-linked1
Vendors9
By vendor
4
4
2
2
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2.4% | Unknown |
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 12.1% | Unknown |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 4.0% | Unknown |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 99.9% | Known |
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 7.8% | Unknown |
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | 1.3% | Unknown |
| CVE-2025-24991 | Microsoft Windows | 2025-03-11 | 2.0% | Unknown |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion | 2025-03-04 | 1.7% | Unknown |
| CVE-2023-42916 | Apple Multiple Products | 2023-12-04 | 17.8% | Unknown |
| CVE-2021-25487 | Samsung Mobile Devices | 2023-06-29 | 0.6% | Unknown |
| CVE-2023-28204 | Apple Multiple Products | 2023-05-22 | 14.2% | Unknown |
| CVE-2017-5030 | Google Chromium V8 | 2022-06-08 | 40.6% | Unknown |
| CVE-2016-5198 | Google Chromium V8 | 2022-06-08 | 34.1% | Unknown |
| CVE-2014-0160 | OpenSSL OpenSSL | 2022-05-04 | 99.9% | Unknown |
| CVE-2022-22675 | Apple macOS | 2022-04-04 | 12.4% | Unknown |
| CVE-2022-22674 | Apple macOS | 2022-04-04 | 1.1% | Unknown |
| CVE-2020-11899 | Treck TCP/IP stack IPv6 | 2022-03-03 | 18.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
17 KEV entries are classified as CWE-125. CWE definition (MITRE)