Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-25181 Advantive VeraCore SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2025-03-10
cve-2025-25037 Aquatronica Controller System Complete Information Disclosure CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-25034 SugarCRM PHP Deserialization RCE CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2025-03-11
cve-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability MEDIUM 5.5 N/A cvelistv5 2025-03-11
cve-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2025-10-14
cve-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-02-21
cve-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2025-03-11
cve-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability MEDIUM 4.6 N/A cvelistv5 2025-03-11
cve-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability HIGH 7.0 N/A cvelistv5 2025-03-11
cve-2025-24893 XWiki Platform Eval Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-10-30
cve-2025-24813 Apache Tomcat Path Equivalence Vulnerability HIGH N/A N/A cvelistv5 2025-04-01
cve-2025-24799 GLPI allows unauthenticated SQL injection through the inventory endpoint HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2025-03-18
cve-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-03-13
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-02-12
cve-2025-24085 Apple Multiple Products Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-01-29
cve-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability MEDIUM 6.5 N/A cvelistv5 2025-04-17
cve-2025-24016 SUSE CVE CVE-2025-24016 UNKNOWN N/A N/A cvelistv5 2026-08-22
cve-2025-23209 Craft CMS Code Injection Vulnerability HIGH 8.1 N/A cvelistv5 2025-02-20
cve-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-01-24
cve-2025-2294 CVE-2025-2294 CRITICAL 9.8 N/A cvelistv5
cve-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL N/A N/A cvelistv5 2025-04-04
cve-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability HIGH 7.1 N/A cvelistv5 2025-03-04
cve-2025-22225 VMware ESXi Arbitrary Write Vulnerability HIGH 8.2 N/A cvelistv5 2025-03-04
cve-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-03-04
cve-2025-22214 CVE-2025-22214 HIGH N/A N/A cvelistv5
cve-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability MEDIUM 6.7 N/A cvelistv5 2025-03-13
cve-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 N/A cvelistv5 2025-06-03
cve-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 N/A cvelistv5 2025-06-03