Full CISA KEV catalog
Every CVE the U.S. cybersecurity agency has ever flagged as actively exploited. Filter by category, sort by severity or exploit-likelihood, search by vendor or product.
| Added | CVE | Vendor / Product | Name & description | CVSS | EPSS |
|---|---|---|---|---|---|
| Oct 14, 2025 | CVE-2025-24990 | Microsoft Windows |
Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vuln…
|
— | 2.8% |
| Oct 14, 2025 | CVE-2025-47827 | IGEL IGEL OS |
IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signatu…
|
— | 0.9% |
| Oct 14, 2025 | CVE-2025-59230 | Microsoft Windows |
Microsoft Windows Improper Access Control Vulnerability
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges loca…
|
— | 4.5% |
| Oct 9, 2025 | CVE-2021-43798 | Grafana Labs Grafana |
Grafana Path Traversal Vulnerability
Grafana contains a path traversal vulnerability that could allow access to local files.
|
— | 94.4% |
| Oct 7, 2025 | CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in IC…
|
— | 26.1% |
| Oct 6, 2025 | CVE-2010-3765 | Mozilla Multiple Products |
Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors rel…
|
— | 86.8% |
| Oct 6, 2025 | CVE-2010-3962 | Microsoft Internet Explorer |
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) a…
|
— | 89.7% |
| Oct 6, 2025 | CVE-2011-3402 | Microsoft Windows |
Microsoft Windows Remote Code Execution Vulnerability
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute…
|
— | 88.3% |
| Oct 6, 2025 | CVE-2013-3918 | Microsoft Windows |
Microsoft Windows Out-of-Bounds Write Vulnerability
Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability …
|
— | 88.5% |
| Oct 6, 2025 | CVE-2021-22555 | Linux Kernel |
Linux Kernel Heap Out-of-Bounds Write Vulnerability
Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
|
— | 85.2% |
| Oct 6, 2025 | CVE-2021-43226 | Microsoft Windows |
Microsoft Windows Privilege Escalation Vulnerability
Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.
|
— | 8.4% |
| Oct 6, 2025 |
CVE-2025-61882
Ransomware |
Oracle E-Business Suite |
Oracle E-Business Suite Unspecified Vulnerability
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via …
|
— | 90.9% |
| Oct 2, 2025 | CVE-2014-6278 | GNU GNU Bash |
GNU Bash OS Command Injection Vulnerability
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.
|
— | 91.7% |
| Oct 2, 2025 | CVE-2015-7755 | Juniper ScreenOS |
Juniper ScreenOS Improper Authentication Vulnerability
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
|
— | 85.8% |
| Oct 2, 2025 | CVE-2017-1000353 | Jenkins Jenkins |
Jenkins Remote Code Execution Vulnerability
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jen…
|
— | 94.5% |
| Oct 2, 2025 | CVE-2025-21043 | Samsung Mobile Devices |
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
|
— | 4.9% |
| Oct 2, 2025 | CVE-2025-4008 | Smartbedded Meteobridge |
Smartbedded Meteobridge Command Injection Vulnerability
Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (…
|
— | 43.9% |
| Sep 29, 2025 | CVE-2021-21311 | Adminer Adminer |
Adminer Server-Side Request Forgery Vulnerability
Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.
|
— | 94.1% |
| Sep 29, 2025 |
CVE-2025-10035
Ransomware |
Fortra GoAnywhere MFT |
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor…
|
— | 62.2% |
| Sep 29, 2025 | CVE-2025-20352 | Cisco IOS and IOS XE |
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remo…
|
— | 3.2% |
| Sep 29, 2025 | CVE-2025-32463 | Sudo Sudo |
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to r…
|
— | 57.3% |
| Sep 29, 2025 | CVE-2025-59689 | Libraesva Email Security Gateway |
Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.
|
— | 6.9% |
| Sep 25, 2025 | CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overf…
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for re…
|
— | 24.7% |
| Sep 25, 2025 | CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense |
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Auth…
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulner…
|
— | 50.9% |
| Sep 23, 2025 | CVE-2025-10585 | Google Chromium V8 |
Google Chromium V8 Type Confusion Vulnerability
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
|
— | 2.1% |
| Sep 11, 2025 | CVE-2025-5086 | Dassault Systèmes DELMIA Apriso |
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
|
— | 41.4% |
| Sep 4, 2025 | CVE-2025-38352 | Linux Kernel |
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
|
— | 0.1% |
| Sep 4, 2025 | CVE-2025-48543 | Android Runtime |
Android Runtime Use-After-Free Vulnerability
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.
|
— | 0.3% |
| Sep 4, 2025 | CVE-2025-53690 | Sitecore Multiple Products |
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use…
|
— | 5.2% |
| Sep 3, 2025 | CVE-2023-50224 | TP-Link TL-WR841N |
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored …
|
— | 1.5% |
Source: CISA KEV catalog. Severity (CVSS) and exploit-probability (EPSS) sync nightly from NVD and FIRST.