Vulnerabilities added to KEV in May 2025
Added24
Ransomware-linked2
Vendors18
By vendor
5
2
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | 24.2% | Unknown |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | Unknown |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | Unknown |
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 1.8% | Unknown |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 23.6% | Unknown |
| CVE-2024-11182 | MDaemon Email Server | 2025-05-19 | 17.5% | Unknown |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | 92.4% | Unknown |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.8% | Known |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 98.1% | Unknown |
| CVE-2025-32756 | Fortinet Multiple Products | 2025-05-14 | 29.8% | Unknown |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | Unknown |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | Unknown |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | Unknown |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | Unknown |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | Unknown |
| CVE-2025-47729 | TeleMessage TM SGNL | 2025-05-12 | 0.4% | Unknown |
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 10.0% | Unknown |
| CVE-2024-11120 | GeoVision Multiple Devices | 2025-05-07 | 28.3% | Unknown |
| CVE-2025-27363 | FreeType FreeType | 2025-05-06 | 27.7% | Unknown |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 99.9% | Known |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | 97.6% | Unknown |
| CVE-2024-58136 | Yiiframework Yii | 2025-05-02 | 87.7% | Unknown |
| CVE-2024-38475 | Apache HTTP Server | 2025-05-01 | 99.9% | Unknown |
| CVE-2023-44221 | SonicWall SMA100 Appliances | 2025-05-01 | 76.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.