Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-43798 grafana: path traversal vulnerability HIGH 7.5 N/A cvelistv5 2025-11-21
cve-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A N/A cvelistv5 2025-10-07
cve-2025-61882 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-10-06
cve-2021-43226 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2025-10-06
cve-2021-22555 kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c HIGH 7.8 N/A cvelistv5 2026-08-07
cve-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability HIGH N/A 73.69% cvelistv5 2025-10-06
cve-2011-3402 Microsoft Windows Remote Code Execution Vulnerability HIGH N/A 78.14% cvelistv5 2025-10-06
cve-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability HIGH N/A 96.83% cvelistv5 2025-10-06
cve-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability HIGH N/A 83.16% cvelistv5 2025-10-06
cve-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability HIGH 8.7 N/A cvelistv5 2025-10-02
cve-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-10-02
cve-2017-1000353 Jenkins Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2025-10-02
cve-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2025-10-02
cve-2014-6278 bash: incorrect parsing of function definitions with nested command substitutions UNKNOWN N/A N/A cvelistv5 2025-11-21
cve-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-09-29
cve-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability HIGH N/A N/A cvelistv5 2025-09-29
cve-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability HIGH 7.7 N/A cvelistv5 2025-09-29
cve-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-09-29
cve-2021-21311 SUSE CVE CVE-2021-21311 UNKNOWN N/A N/A cvelistv5 2025-09-29
cve-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability MEDIUM 6.5 N/A cvelistv5 2025-09-25
cve-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability CRITICAL 9.9 N/A cvelistv5 2025-09-25
cve-2025-10585 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2025-09-23
cve-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2025-09-11
cve-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-09-04
cve-2025-48543 Android Runtime Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-09-04
cve-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_... HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability HIGH 8.6 N/A cvelistv5 2025-09-03
cve-2023-50224 TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability MEDIUM 6.5 N/A cvelistv5 2026-09-03
cve-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-09-02
cve-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability HIGH 8.8 N/A cvelistv5 2025-09-02