Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability HIGH N/A 1.20% cvelistv5 2025-12-17
cve-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability HIGH N/A 2.08% cvelistv5 2025-12-17
cve-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability CRITICAL 10.0 29.88% cvelistv5 2025-12-17
cve-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CRITICAL 9.1 68.29% cvelistv5 2025-12-16
cve-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability HIGH N/A 8.76% cvelistv5 2025-12-15
cve-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability HIGH 7.1 53.30% cvelistv5 2025-12-15
cve-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability HIGH N/A 22.33% cvelistv5 2025-12-12
cve-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 8.8 27.06% cvelistv5 2025-12-12
cve-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability HIGH 8.2 64.87% cvelistv5 2025-12-11
cve-2025-62221 Microsoft Windows Use After Free Vulnerability HIGH 7.8 2.50% cvelistv5 2025-12-09
cve-2025-6218 RARLAB WinRAR Path Traversal Vulnerability HIGH N/A 90.48% cvelistv5 2025-12-09
cve-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability HIGH 7.2 3.42% cvelistv5 2025-12-08
cve-2022-37055 D-Link Routers Buffer Overflow Vulnerability CRITICAL 9.8 55.53% cvelistv5 2025-12-08
cve-2025-55182 Meta React Server Components Remote Code Execution Vulnerability CRITICAL N/A 99.80% cvelistv5 2025-12-05
cve-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 8.8 39.36% cvelistv5 2025-12-03
cve-2025-48633 Android Framework Information Disclosure Vulnerability MEDIUM 5.5 0.26% cvelistv5 2025-12-02
cve-2025-48572 Android Framework Privilege Escalation Vulnerability HIGH 7.8 0.26% cvelistv5 2025-12-02
cve-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability MEDIUM 5.4 48.05% cvelistv5 2025-11-28
cve-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability HIGH N/A 88.65% cvelistv5 2025-11-21
cve-2025-13223 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 5.03% cvelistv5 2025-11-19
cve-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability MEDIUM 6.7 55.58% cvelistv5 2025-11-18
cve-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability CRITICAL 9.4 91.84% cvelistv5 2025-11-14
cve-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability CRITICAL 9.3 91.30% cvelistv5 2025-11-12
cve-2025-62215 Microsoft Windows Race Condition Vulnerability HIGH 7.0 5.99% cvelistv5 2025-11-12
cve-2025-12480 Gladinet Triofox Improper Access Control Vulnerability CRITICAL 9.1 90.53% cvelistv5 2025-11-12
cve-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH 8.8 33.17% cvelistv5 2025-11-10
cve-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.0 99.66% cvelistv5 2025-11-04
cve-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability HIGH 7.5 92.14% cvelistv5 2025-11-04
cve-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability HIGH N/A 8.44% cvelistv5 2025-10-30
cve-2025-24893 XWiki Platform Eval Injection Vulnerability CRITICAL 9.8 99.86% cvelistv5 2025-10-30