Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 2025-11-10 | ||
| CVE-2025-33053 | Microsoft Windows | 2025-06-10 | 2025-07-01 | ||
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | 2026-04-20 | 2026-05-04 | ||
| CVE-2025-32756 | Fortinet Multiple Products | 2025-05-14 | 2025-06-04 | ||
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2025-06-03 | ||
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2025-06-03 | ||
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 2025-06-03 | ||
| CVE-2025-32463 | Sudo Sudo | 2025-09-29 | 2025-10-20 | ||
| CVE-2025-32433 | Erlang Erlang/OTP | 2025-06-09 | 2025-06-30 | ||
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 2026-04-03 | ||
| CVE-2025-31277 | Apple Multiple Products | 2026-03-20 | 2026-04-03 | ||
| CVE-2025-31201 | Apple Multiple Products | 2025-04-17 | 2025-05-08 | ||
| CVE-2025-31200 | Apple Multiple Products | 2025-04-17 | 2025-05-08 | ||
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-30406 | Gladinet CentreStack | 2025-04-08 | 2025-04-29 | ||
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 2025-06-03 | ||
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 2025-06-03 | ||
| CVE-2025-30154 | reviewdog action-setup GitHub Action | 2025-03-24 | 2025-04-14 | ||
| CVE-2025-30066 | tj-actions changed-files GitHub Action | 2025-03-18 | 2025-04-08 | ||
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | 2026-05-08 | ||
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 2025-06-09 | ||
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 2025-10-28 | ||
| CVE-2025-2783 | Google Chromium Mojo | 2025-03-27 | 2025-04-17 | ||
| CVE-2025-2776 | SysAid SysAid On-Prem | 2025-07-22 | 2025-08-12 |