Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-48633 Android Framework Information Disclosure Vulnerability MEDIUM 5.5 N/A cvelistv5 2025-12-02
cve-2025-48572 Android Framework Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2025-12-02
cve-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability MEDIUM 5.4 N/A cvelistv5 2025-11-28
cve-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability HIGH N/A N/A cvelistv5 2025-11-21
cve-2025-13223 chromium-browser: Type Confusion in V8 HIGH 8.8 N/A cvelistv5 2025-11-21
cve-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability MEDIUM 6.7 N/A cvelistv5 2025-11-18
cve-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2025-11-14
cve-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-11-12
cve-2025-62215 Microsoft Windows Race Condition Vulnerability HIGH 7.0 N/A cvelistv5 2025-11-12
cve-2025-12480 Gladinet Triofox Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-11-12
cve-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH 8.8 N/A cvelistv5 2025-11-10
cve-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-11-04
cve-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability HIGH 7.5 N/A cvelistv5 2025-11-04
cve-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools HIGH 7.8 N/A cvelistv5 2026-09-01
cve-2025-24893 XWiki Platform Eval Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-10-30
cve-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-10-28
cve-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-10-28
cve-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2025-10-24
cve-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-10-24
cve-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability HIGH N/A N/A cvelistv5 2025-10-22
cve-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CRITICAL N/A N/A cvelistv5 2025-10-20
cve-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-10-20
cve-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A N/A cvelistv5 2025-10-20
cve-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A N/A cvelistv5 2025-10-20
cve-2022-48503 Apple Multiple Products Unspecified Vulnerability HIGH N/A N/A cvelistv5 2025-10-20
cve-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability HIGH N/A N/A cvelistv5 2025-10-15
cve-2025-59230 Microsoft Windows Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-10-14
cve-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability HIGH N/A N/A cvelistv5 2025-10-14
cve-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2025-10-14
cve-2016-7836 SKYSEA Client View Improper Authentication Vulnerability HIGH N/A 19.23% cvelistv5 2025-10-14