Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability HIGH N/A 88.65% cvelistv5 2025-11-21
cve-2025-13223 chromium-browser: Type Confusion in V8 HIGH 8.8 5.03% cvelistv5 2025-11-21
cve-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability MEDIUM 6.7 55.58% cvelistv5 2025-11-18
cve-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability CRITICAL 9.4 91.84% cvelistv5 2025-11-14
cve-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability CRITICAL 9.3 91.30% cvelistv5 2025-11-12
cve-2025-62215 Microsoft Windows Race Condition Vulnerability HIGH 7.0 5.99% cvelistv5 2025-11-12
cve-2025-12480 Gladinet Triofox Improper Access Control Vulnerability HIGH N/A 95.43% cvelistv5 2025-11-12
cve-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH 8.8 33.17% cvelistv5 2025-11-10
cve-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.0 99.66% cvelistv5 2025-11-04
cve-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability HIGH 7.5 92.14% cvelistv5 2025-11-04
cve-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools HIGH 7.8 8.44% cvelistv5 2026-09-01
cve-2025-24893 XWiki Platform Eval Injection Vulnerability CRITICAL 9.8 99.86% cvelistv5 2025-10-30
cve-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability HIGH N/A 73.31% cvelistv5 2025-10-28
cve-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability HIGH N/A 77.96% cvelistv5 2025-10-28
cve-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability HIGH N/A 99.98% cvelistv5 2025-10-24
cve-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability CRITICAL 9.1 94.53% cvelistv5 2025-10-24
cve-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability HIGH N/A 2.77% cvelistv5 2025-10-22
cve-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CRITICAL N/A 95.89% cvelistv5 2025-10-20
cve-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability HIGH N/A 82.70% cvelistv5 2025-10-20
cve-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A 97.17% cvelistv5 2025-10-20
cve-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A 73.04% cvelistv5 2025-10-20
cve-2022-48503 Apple Multiple Products Unspecified Vulnerability HIGH N/A 3.21% cvelistv5 2025-10-20
cve-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability HIGH N/A 87.99% cvelistv5 2025-10-15
cve-2025-59230 Microsoft Windows Improper Access Control Vulnerability HIGH N/A 2.66% cvelistv5 2025-10-14
cve-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability HIGH N/A 4.93% cvelistv5 2025-10-14
cve-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability HIGH N/A 6.37% cvelistv5 2025-10-14
cve-2016-7836 SKYSEA Client View Improper Authentication Vulnerability HIGH N/A 19.23% cvelistv5 2025-10-14
cve-2021-43798 Grafana Path Traversal Vulnerability HIGH N/A 88.50% cvelistv5 2025-10-09
cve-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A 3.99% cvelistv5 2025-10-07
cve-2025-61882 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 99.73% cvelistv5 2025-10-06