Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-21590 | Juniper Junos OS | 2025-03-13 | 2025-04-03 | ||
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 2025-06-24 | ||
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 2025-06-24 | ||
| CVE-2025-21418 | Microsoft Windows | 2025-02-11 | 2025-03-04 | ||
| CVE-2025-21391 | Microsoft Windows | 2025-02-11 | 2025-03-04 | ||
| CVE-2025-21335 | Microsoft Windows | 2025-01-14 | 2025-02-04 | ||
| CVE-2025-21334 | Microsoft Windows | 2025-01-14 | 2025-02-04 | ||
| CVE-2025-21333 | Microsoft Windows | 2025-01-14 | 2025-02-04 | ||
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 2025-10-23 | ||
| CVE-2025-21042 | Samsung Mobile Devices | 2025-11-10 | 2025-12-01 | ||
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 2025-12-24 | ||
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 2025-09-26 | ||
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 2025-10-20 | ||
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 2025-08-18 | ||
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 2025-09-26 | ||
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 2025-08-18 | ||
| CVE-2025-1976 | Broadcom Brocade Fabric OS | 2025-04-28 | 2025-05-19 | ||
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 2026-03-05 | ||
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 2026-01-19 | ||
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 2025-12-26 | ||
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 2026-01-05 | ||
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 2026-01-02 | ||
| CVE-2025-13223 | Google Chromium V8 | 2025-11-19 | 2025-12-10 | ||
| CVE-2025-1316 | Edimax IC-7100 IP Camera | 2025-03-19 | 2025-04-09 | ||
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | 2025-12-03 |