Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2025-33053Microsoft Windows2025-06-102025-07-01
CVE-2025-32975Quest KACE Systems Management Appliance (SMA)2026-04-202026-05-04
CVE-2025-32756Fortinet Multiple Products2025-05-142025-06-04
CVE-2025-32709Microsoft Windows2025-05-132025-06-03
CVE-2025-32706Microsoft Windows2025-05-132025-06-03
CVE-2025-32701Microsoft Windows2025-05-132025-06-03
CVE-2025-32463Sudo Sudo2025-09-292025-10-20
CVE-2025-32433Erlang Erlang/OTP2025-06-092025-06-30
CVE-2025-32432Craft CMS Craft CMS2026-03-202026-04-03
CVE-2025-31277Apple Multiple Products2026-03-202026-04-03
CVE-2025-31201Apple Multiple Products2025-04-172025-05-08
CVE-2025-31200Apple Multiple Products2025-04-172025-05-08
CVE-2025-31125Vite Vitejs2026-01-222026-02-12
CVE-2025-30406Gladinet CentreStack2025-04-082025-04-29
CVE-2025-30400Microsoft Windows2025-05-132025-06-03
CVE-2025-30397Microsoft Windows2025-05-132025-06-03
CVE-2025-30154reviewdog action-setup GitHub Action2025-03-242025-04-14
CVE-2025-30066tj-actions changed-files GitHub Action2025-03-182025-04-08
CVE-2025-29635D-Link DIR-823X2026-04-242026-05-08
CVE-2025-27920Srimax Output Messenger2025-05-192025-06-09
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS)2025-10-072025-10-28
CVE-2025-2783Google Chromium Mojo2025-03-272025-04-17
CVE-2025-2776SysAid SysAid On-Prem2025-07-222025-08-12
CVE-2025-2775SysAid SysAid On-Prem2025-07-222025-08-12
CVE-2025-2749Kentico Kentico Xperience2026-04-202026-05-04
Page 25 of 114 · 2839 entriesPreviousNext