Exploited Vulnerabilities DailyVulnerabilities added to KEV in December 2025
Added20
Ransomware-linked2
Vendors19
By vendor
2
1
1
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 83.2% | Unknown |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | 96.9% | Unknown |
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 26.5% | Known |
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 1.1% | Unknown |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | 2.7% | Unknown |
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 32.3% | Unknown |
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 68.2% | Unknown |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 8.7% | Unknown |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 53.3% | Unknown |
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 22.3% | Unknown |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 27.0% | Unknown |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 60.5% | Unknown |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | Unknown |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 90.4% | Unknown |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 3.4% | Unknown |
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 55.5% | Unknown |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | 99.8% | Known |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 39.3% | Unknown |
| CVE-2025-48633 | Android Framework | 2025-12-02 | 0.2% | Unknown |
| CVE-2025-48572 | Android Framework | 2025-12-02 | 0.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.