Exploited Vulnerabilities DailyVulnerabilities added to KEV in February 2025
Added27
Ransomware-linked3
Vendors18
By vendor
6
2
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-49035 | Microsoft Partner Center | 2025-02-25 | 1.3% | Unknown |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 77.2% | Unknown |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 3.9% | Unknown |
| CVE-2017-3066 | Adobe ColdFusion | 2025-02-24 | 90.5% | Unknown |
| CVE-2025-24989 | Microsoft Power Pages | 2025-02-21 | 1.6% | Unknown |
| CVE-2025-23209 | Craft CMS Craft CMS | 2025-02-20 | 21.7% | Unknown |
| CVE-2025-0111 | Palo Alto Networks PAN-OS | 2025-02-20 | 1.9% | Unknown |
| CVE-2025-0108 | Palo Alto Networks PAN-OS | 2025-02-18 | 98.4% | Unknown |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | 95.1% | Known |
| CVE-2024-57727 | SimpleHelp SimpleHelp | 2025-02-13 | 96.5% | Known |
| CVE-2025-24200 | Apple iOS and iPadOS | 2025-02-12 | 4.4% | Unknown |
| CVE-2024-41710 | Mitel SIP Phones | 2025-02-12 | 41.6% | Unknown |
| CVE-2025-21418 | Microsoft Windows | 2025-02-11 | 1.5% | Unknown |
| CVE-2025-21391 | Microsoft Windows | 2025-02-11 | 2.3% | Unknown |
| CVE-2024-40891 | Zyxel DSL CPE Devices | 2025-02-11 | 21.7% | Unknown |
| CVE-2024-40890 | Zyxel DSL CPE Devices | 2025-02-11 | 20.7% | Unknown |
| CVE-2025-0994 | Trimble Cityworks | 2025-02-07 | 31.0% | Unknown |
| CVE-2025-0411 | 7-Zip 7-Zip | 2025-02-06 | 67.0% | Unknown |
| CVE-2024-21413 | Microsoft Office Outlook | 2025-02-06 | 94.6% | Unknown |
| CVE-2022-23748 | Audinate Dante Discovery | 2025-02-06 | 9.0% | Unknown |
| CVE-2020-29574 | Sophos CyberoamOS | 2025-02-06 | 4.6% | Known |
| CVE-2020-15069 | Sophos XG Firewall | 2025-02-06 | 10.6% | Unknown |
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | 3.3% | Unknown |
| CVE-2024-45195 | Apache OFBiz | 2025-02-04 | 99.9% | Unknown |
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | 98.6% | Unknown |
| CVE-2018-9276 | Paessler PRTG Network Monitor | 2025-02-04 | 86.9% | Unknown |
| CVE-2018-19410 | Paessler PRTG Network Monitor | 2025-02-04 | 97.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.