CVEs from 2025 known to be exploited
Entries188
Ransomware-linked24
Avg. lag0.2 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | 1.2% | Unknown |
| CVE-2025-39682 | Linux Kernel | 2026-09-18 | 2.8% | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products | 2026-09-09 | 3.8% | Unknown |
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | 62.4% | Unknown |
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 29.4% | Unknown |
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 19.9% | Unknown |
| CVE-2025-48595 | Android Framework | 2026-06-02 | 1.7% | Unknown |
| CVE-2025-34291 | Langflow Langflow | 2026-05-21 | 92.8% | Unknown |
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | 87.9% | Unknown |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 1.7% | Unknown |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | 2026-04-20 | 2.4% | Unknown |
| CVE-2025-2749 | Kentico Kentico Xperience | 2026-04-20 | 4.0% | Unknown |
| CVE-2025-60710 | Microsoft Windows | 2026-04-13 | 4.5% | Known |
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2.2% | Unknown |
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 97.3% | Unknown |
| CVE-2025-43520 | Apple Multiple Products | 2026-03-20 | 0.4% | Unknown |
| CVE-2025-43510 | Apple Multiple Products | 2026-03-20 | 0.3% | Unknown |
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 99.7% | Unknown |
| CVE-2025-31277 | Apple Multiple Products | 2026-03-20 | 1.6% | Unknown |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 20.2% | Unknown |
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | 2026-03-16 | 63.1% | Unknown |
| CVE-2025-68613 | n8n n8n | 2026-03-11 | 98.9% | Unknown |
| CVE-2025-26399 | SolarWinds Web Help Desk | 2026-03-09 | 89.5% | Known |
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 26.8% | Unknown |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 98.9% | Unknown |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 73.5% | Unknown |
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 1.7% | Unknown |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 93.9% | Unknown |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 84.6% | Unknown |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 84.1% | Unknown |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 85.6% | Known |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 48.8% | Unknown |
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 4.5% | Unknown |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 81.9% | Unknown |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 65.1% | Unknown |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 85.2% | Unknown |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 90.1% | Unknown |
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 83.2% | Unknown |
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 26.5% | Known |
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 1.1% | Unknown |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | 2.7% | Unknown |
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 32.3% | Unknown |
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 68.2% | Unknown |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 8.7% | Unknown |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 53.3% | Unknown |
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 22.3% | Unknown |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 60.5% | Unknown |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | Unknown |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 90.4% | Unknown |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 3.4% | Unknown |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | 99.8% | Known |
| CVE-2025-48633 | Android Framework | 2025-12-02 | 0.2% | Unknown |
| CVE-2025-48572 | Android Framework | 2025-12-02 | 0.2% | Unknown |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 88.6% | Unknown |
| CVE-2025-13223 | Google Chromium V8 | 2025-11-19 | 5.0% | Unknown |
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 55.5% | Unknown |
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | 91.8% | Unknown |
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 91.3% | Unknown |
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 5.9% | Unknown |
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | 95.4% | Unknown |
| CVE-2025-21042 | Samsung Mobile Devices | 2025-11-10 | 33.1% | Unknown |
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 99.6% | Unknown |
| CVE-2025-11371 | Gladinet CentreStack and Triofox | 2025-11-04 | 92.1% | Unknown |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools | 2025-10-30 | 8.4% | Unknown |
| CVE-2025-24893 | XWiki Platform | 2025-10-30 | 99.8% | Unknown |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 73.7% | Unknown |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 79.3% | Unknown |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 99.9% | Unknown |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 94.5% | Unknown |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2.7% | Unknown |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 95.8% | Known |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.6% | Unknown |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | 97.1% | Unknown |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | 73.0% | Unknown |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 88.2% | Unknown |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.6% | Unknown |
| CVE-2025-47827 | IGEL IGEL OS | 2025-10-14 | 4.9% | Unknown |
| CVE-2025-24990 | Microsoft Windows | 2025-10-14 | 6.3% | Unknown |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 4.0% | Unknown |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 99.7% | Known |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.6% | Unknown |
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 2.1% | Unknown |
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 1.8% | Unknown |
| CVE-2025-32463 | Sudo Sudo | 2025-09-29 | 55.4% | Unknown |
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | Unknown |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.7% | Known |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 87.0% | Unknown |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 70.6% | Unknown |
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 5.3% | Unknown |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 96.9% | Unknown |
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 51.0% | Unknown |
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 0.5% | Unknown |
| CVE-2025-38352 | Linux Kernel | 2025-09-04 | 1.2% | Unknown |
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 35.8% | Unknown |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 4.7% | Unknown |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 86.3% | Unknown |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 20.2% | Unknown |
| CVE-2025-48384 | Git Git | 2025-08-25 | 4.2% | Unknown |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | 2025-08-21 | 32.4% | Unknown |
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 23.9% | Unknown |
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 3.4% | Unknown |
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 1.8% | Unknown |
| CVE-2025-8088 | RARLAB WinRAR | 2025-08-12 | 94.2% | Known |
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.9% | Unknown |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 97.6% | Unknown |
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 9.4% | Unknown |
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 95.1% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2025-2776 | SysAid SysAid On-Prem | 2025-07-22 | 64.7% | Unknown |
| CVE-2025-2775 | SysAid SysAid On-Prem | 2025-07-22 | 42.6% | Unknown |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | 99.8% | Unknown |
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 93.2% | Unknown |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 99.9% | Known |
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 14.1% | Unknown |
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 0.5% | Unknown |
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 11.1% | Unknown |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 10.5% | Unknown |
| CVE-2025-43200 | Apple Multiple Products | 2025-06-16 | 1.1% | Unknown |
| CVE-2025-33053 | Microsoft Windows | 2025-06-10 | 87.0% | Unknown |
| CVE-2025-24016 | Wazuh Wazuh Server | 2025-06-10 | 93.8% | Unknown |
| CVE-2025-32433 | Erlang Erlang/OTP | 2025-06-09 | 98.7% | Unknown |
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 7.8% | Unknown |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | 2025-06-03 | 1.0% | Unknown |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.4% | Unknown |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.8% | Unknown |
| CVE-2025-3935 | ConnectWise ScreenConnect | 2025-06-02 | 3.5% | Unknown |
| CVE-2025-35939 | Craft CMS Craft CMS | 2025-06-02 | 1.3% | Unknown |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | 24.2% | Unknown |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | Unknown |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | Unknown |
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 1.8% | Unknown |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.8% | Known |
| CVE-2025-32756 | Fortinet Multiple Products | 2025-05-14 | 29.8% | Unknown |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | Unknown |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | Unknown |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | Unknown |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | Unknown |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | Unknown |
| CVE-2025-47729 | TeleMessage TM SGNL | 2025-05-12 | 0.4% | Unknown |
| CVE-2025-27363 | FreeType FreeType | 2025-05-06 | 27.7% | Unknown |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 99.9% | Known |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | 97.6% | Unknown |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 99.4% | Known |
| CVE-2025-42599 | Qualitia Active! Mail | 2025-04-28 | 3.2% | Unknown |
| CVE-2025-3928 | Commvault Web Server | 2025-04-28 | 2.4% | Unknown |
| CVE-2025-1976 | Broadcom Brocade Fabric OS | 2025-04-28 | 0.6% | Unknown |
| CVE-2025-31201 | Apple Multiple Products | 2025-04-17 | 13.9% | Unknown |
| CVE-2025-31200 | Apple Multiple Products | 2025-04-17 | 18.7% | Unknown |
| CVE-2025-24054 | Microsoft Windows | 2025-04-17 | 58.9% | Unknown |
| CVE-2025-30406 | Gladinet CentreStack | 2025-04-08 | 94.3% | Unknown |
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 13.9% | Known |
| CVE-2025-31161 | CrushFTP CrushFTP | 2025-04-07 | 99.9% | Known |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 99.9% | Known |
| CVE-2025-24813 | Apache Tomcat | 2025-04-01 | 99.9% | Unknown |
| CVE-2025-2783 | Google Chromium Mojo | 2025-03-27 | 9.2% | Unknown |
| CVE-2025-30154 | reviewdog action-setup GitHub Action | 2025-03-24 | 2.4% | Unknown |
| CVE-2025-1316 | Edimax IC-7100 IP Camera | 2025-03-19 | 74.4% | Unknown |
| CVE-2025-30066 | tj-actions changed-files GitHub Action | 2025-03-18 | 72.0% | Unknown |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy | 2025-03-18 | 7.2% | Known |
| CVE-2025-24201 | Apple Multiple Products | 2025-03-13 | 3.8% | Unknown |
| CVE-2025-21590 | Juniper Junos OS | 2025-03-13 | 1.7% | Unknown |
| CVE-2025-26633 | Microsoft Windows | 2025-03-11 | 30.3% | Known |
| CVE-2025-24993 | Microsoft Windows | 2025-03-11 | 2.2% | Unknown |
| CVE-2025-24991 | Microsoft Windows | 2025-03-11 | 2.0% | Unknown |
| CVE-2025-24985 | Microsoft Windows | 2025-03-11 | 3.9% | Unknown |
| CVE-2025-24984 | Microsoft Windows | 2025-03-11 | 1.9% | Unknown |
| CVE-2025-24983 | Microsoft Windows | 2025-03-11 | 1.3% | Unknown |
| CVE-2025-25181 | Advantive VeraCore | 2025-03-10 | 55.5% | Unknown |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion | 2025-03-04 | 1.7% | Unknown |
| CVE-2025-22225 | VMware ESXi | 2025-03-04 | 1.0% | Known |
| CVE-2025-22224 | VMware ESXi and Workstation | 2025-03-04 | 1.5% | Unknown |
| CVE-2025-24989 | Microsoft Power Pages | 2025-02-21 | 1.6% | Unknown |
| CVE-2025-23209 | Craft CMS Craft CMS | 2025-02-20 | 21.7% | Unknown |
| CVE-2025-0111 | Palo Alto Networks PAN-OS | 2025-02-20 | 1.9% | Unknown |
| CVE-2025-0108 | Palo Alto Networks PAN-OS | 2025-02-18 | 98.4% | Unknown |
| CVE-2025-24200 | Apple iOS and iPadOS | 2025-02-12 | 4.4% | Unknown |
| CVE-2025-21418 | Microsoft Windows | 2025-02-11 | 1.5% | Unknown |
| CVE-2025-21391 | Microsoft Windows | 2025-02-11 | 2.3% | Unknown |
| CVE-2025-0994 | Trimble Cityworks | 2025-02-07 | 31.0% | Unknown |
| CVE-2025-0411 | 7-Zip 7-Zip | 2025-02-06 | 67.0% | Unknown |
| CVE-2025-24085 | Apple Multiple Products | 2025-01-29 | 17.5% | Unknown |
| CVE-2025-23006 | SonicWall SMA1000 Appliances | 2025-01-24 | 23.4% | Known |
| CVE-2025-21335 | Microsoft Windows | 2025-01-14 | 1.3% | Unknown |
| CVE-2025-21334 | Microsoft Windows | 2025-01-14 | 1.5% | Unknown |
| CVE-2025-21333 | Microsoft Windows | 2025-01-14 | 9.9% | Unknown |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
188 CVE-2025 vulnerabilities are in KEV; on average they were listed 0.2 years after the CVE year.