Vulnerabilities added to KEV in August 2025
Added15
Ransomware-linked1
Vendors9
By vendor
3
3
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 86.3% | Unknown |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 20.2% | Unknown |
| CVE-2025-48384 | Git Git | 2025-08-25 | 4.2% | Unknown |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | Unknown |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.4% | Unknown |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | 2025-08-21 | 32.4% | Unknown |
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 23.9% | Unknown |
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 3.4% | Unknown |
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 1.8% | Unknown |
| CVE-2025-8088 | RARLAB WinRAR | 2025-08-12 | 94.2% | Known |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 87.5% | Unknown |
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 43.2% | Unknown |
| CVE-2022-40799 | D-Link DNR-322L | 2025-08-05 | 33.6% | Unknown |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 54.0% | Unknown |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 97.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.