Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 2025-10-14 | ||
| CVE-2025-10230 | Not specified | 10.0critical | — | — | |
| CVE-2025-0994 | Trimble Cityworks | 2025-02-07 | 2025-02-28 | ||
| CVE-2025-0411 | 7-Zip 7-Zip | 2025-02-06 | 2025-02-27 | ||
| CVE-2025-0111 | Palo Alto Networks PAN-OS | 2025-02-20 | 2025-03-13 | ||
| CVE-2025-0108 | Palo Alto Networks PAN-OS | 2025-02-18 | 2025-03-11 | ||
| CVE-2024-9537 | ScienceLogic SL1 | 2024-10-21 | 2024-11-11 | ||
| CVE-2024-9465 | Palo Alto Networks Expedition | 2024-11-14 | 2024-12-05 | ||
| CVE-2024-9463 | Palo Alto Networks Expedition | 2024-11-14 | 2024-12-05 | ||
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 2024-10-30 | ||
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 2024-10-30 | ||
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | 2024-10-10 | ||
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 2024-11-25 | ||
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 2024-11-25 | ||
| CVE-2024-8190 | Ivanti Cloud Services Appliance | 2024-09-13 | 2024-10-04 | ||
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 2025-09-15 | ||
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 2025-09-15 | ||
| CVE-2024-7971 | Google Chromium V8 | 2024-08-26 | 2024-09-16 | ||
| CVE-2024-7965 | Google Chromium V8 | 2024-08-28 | 2024-09-18 | ||
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 2026-03-10 | ||
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | 2024-10-15 | ||
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 2026-05-08 | ||
| CVE-2024-7262 | Kingsoft WPS Office | 2024-09-03 | 2024-09-24 | ||
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 2025-05-28 | ||
| CVE-2024-5910 | Palo Alto Networks Expedition | 2024-11-07 | 2024-11-28 |