Exploited Vulnerabilities DailyVulnerabilities added to KEV in April 2025
Added15
Ransomware-linked4
Vendors12
By vendor
2
2
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 99.4% | Known |
| CVE-2025-42599 | Qualitia Active! Mail | 2025-04-28 | 3.2% | Unknown |
| CVE-2025-3928 | Commvault Web Server | 2025-04-28 | 2.4% | Unknown |
| CVE-2025-1976 | Broadcom Brocade Fabric OS | 2025-04-28 | 0.6% | Unknown |
| CVE-2025-31201 | Apple Multiple Products | 2025-04-17 | 13.9% | Unknown |
| CVE-2025-31200 | Apple Multiple Products | 2025-04-17 | 18.7% | Unknown |
| CVE-2025-24054 | Microsoft Windows | 2025-04-17 | 58.9% | Unknown |
| CVE-2021-20035 | SonicWall SMA100 Appliances | 2025-04-16 | 4.1% | Unknown |
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | 4.1% | Unknown |
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | 1.3% | Unknown |
| CVE-2025-30406 | Gladinet CentreStack | 2025-04-08 | 94.3% | Unknown |
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 13.9% | Known |
| CVE-2025-31161 | CrushFTP CrushFTP | 2025-04-07 | 99.9% | Known |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 99.9% | Known |
| CVE-2025-24813 | Apache Tomcat | 2025-04-01 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.