Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2025-2747Kentico Xperience CMS2025-10-202025-11-10
CVE-2025-2746Kentico Xperience CMS2025-10-202025-11-10
CVE-2025-27363FreeType FreeType2025-05-062025-05-27
CVE-2025-27038Qualcomm Multiple Chipsets2025-06-032025-06-24
CVE-2025-25257Fortinet FortiWeb2025-07-182025-08-08
CVE-2025-25181Advantive VeraCore2025-03-102025-03-31
CVE-2025-24993Microsoft Windows2025-03-112025-04-01
CVE-2025-24991Microsoft Windows2025-03-112025-04-01
CVE-2025-24990Microsoft Windows2025-10-142025-11-04
CVE-2025-24989Microsoft Power Pages2025-02-212025-03-14
CVE-2025-24985Microsoft Windows2025-03-112025-04-01
CVE-2025-24984Microsoft Windows2025-03-112025-04-01
CVE-2025-24983Microsoft Windows2025-03-112025-04-01
CVE-2025-24893XWiki Platform2025-10-302025-11-20
CVE-2025-24813Apache Tomcat2025-04-012025-04-22
CVE-2025-24201Apple Multiple Products2025-03-132025-04-03
CVE-2025-24200Apple iOS and iPadOS2025-02-122025-03-05
CVE-2025-24085Apple Multiple Products2025-01-292025-02-19
CVE-2025-24054Microsoft Windows2025-04-172025-05-08
CVE-2025-24016Wazuh Wazuh Server2025-06-102025-07-01
CVE-2025-23209Craft CMS Craft CMS2025-02-202025-03-13
CVE-2025-22226VMware ESXi, Workstation, and Fusion2025-03-042025-03-25
CVE-2025-22224VMware ESXi and Workstation2025-03-042025-03-25
CVE-2025-21590Juniper Junos OS2025-03-132025-04-03
CVE-2025-21480Qualcomm Multiple Chipsets2025-06-032025-06-24
Page 26 of 114 · 2839 entriesPreviousNext