Vulnerabilities added to KEV in October 2025
Added31
Ransomware-linked3
Vendors20
By vendor
8
2
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools | 2025-10-30 | 8.4% | Unknown |
| CVE-2025-24893 | XWiki Platform | 2025-10-30 | 99.8% | Unknown |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 73.7% | Unknown |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 79.3% | Unknown |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 99.9% | Unknown |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 94.5% | Unknown |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2.7% | Unknown |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 95.8% | Known |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.6% | Unknown |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | 97.1% | Unknown |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | 73.0% | Unknown |
| CVE-2022-48503 | Apple Multiple Products | 2025-10-20 | 3.2% | Unknown |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 88.2% | Unknown |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.6% | Unknown |
| CVE-2025-47827 | IGEL IGEL OS | 2025-10-14 | 4.9% | Unknown |
| CVE-2025-24990 | Microsoft Windows | 2025-10-14 | 6.3% | Unknown |
| CVE-2016-7836 | SKYSEA Client View | 2025-10-14 | 19.2% | Unknown |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 88.5% | Unknown |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 4.0% | Unknown |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 99.7% | Known |
| CVE-2021-43226 | Microsoft Windows | 2025-10-06 | 3.2% | Known |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.6% | Unknown |
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 73.6% | Unknown |
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 78.1% | Unknown |
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 96.8% | Unknown |
| CVE-2010-3765 | Mozilla Multiple Products | 2025-10-06 | 83.1% | Unknown |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.6% | Unknown |
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 2.1% | Unknown |
| CVE-2017-1000353 | Jenkins Jenkins | 2025-10-02 | 99.6% | Unknown |
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 61.1% | Unknown |
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 99.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.