1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 7 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2010-3765Mozilla / Multiple ProductsMozilla Multiple Products Remote Code Execution Vulnerability2025-10-06
83.2%
CVE-2010-3962Microsoft / Internet ExplorerMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability2025-10-06
96.8%
CVE-2011-3402Microsoft / WindowsMicrosoft Windows Remote Code Execution Vulnerability2025-10-06
78.1%
CVE-2013-3918Microsoft / WindowsMicrosoft Windows Out-of-Bounds Write Vulnerability2025-10-06
73.7%
CVE-2021-22555Linux / KernelLinux Kernel Heap Out-of-Bounds Write Vulnerability2025-10-06
78.7%
CVE-2021-43226Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2025-10-06
3.1%
CVE-2025-61882Oracle / E-Business SuiteOracle E-Business Suite Unspecified Vulnerability2025-10-06
99.7%
CVE-2014-6278GNU / GNU BashGNU Bash OS Command Injection Vulnerability2025-10-02
99.6%
CVE-2015-7755Juniper / ScreenOSJuniper ScreenOS Improper Authentication Vulnerability2025-10-02
61.1%
CVE-2017-1000353Jenkins / JenkinsJenkins Remote Code Execution Vulnerability2025-10-02
99.7%
CVE-2025-21043Samsung / Mobile DevicesSamsung Mobile Devices Out-of-Bounds Write Vulnerability2025-10-02
2.1%
CVE-2025-4008Smartbedded / MeteobridgeSmartbedded Meteobridge Command Injection Vulnerability2025-10-02
93.7%
CVE-2021-21311Adminer / AdminerAdminer Server-Side Request Forgery Vulnerability2025-09-29
98.5%
CVE-2025-10035Fortra / GoAnywhere MFTFortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability2025-09-29
99.8%
CVE-2025-20352Cisco / IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Executio…2025-09-29
39.4%
CVE-2025-32463Sudo / SudoSudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability2025-09-29
55.5%
CVE-2025-59689Libraesva / Email Security GatewayLibraesva Email Security Gateway Command Injection Vulnerability2025-09-29
1.9%
CVE-2025-20333Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall T…2025-09-25
70.7%
CVE-2025-20362Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall T…2025-09-25
87.1%
CVE-2025-10585Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2025-09-23
5.4%
CVE-2025-5086Dassault Systèmes / DELMIA AprisoDassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability2025-09-11
96.9%
CVE-2025-38352Linux / KernelLinux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability2025-09-04
1.3%
CVE-2025-48543Android / RuntimeAndroid Runtime Use-After-Free Vulnerability2025-09-04
0.5%
CVE-2025-53690Sitecore / Multiple ProductsSitecore Multiple Products Deserialization of Untrusted Data Vulnerability2025-09-04
51.1%
CVE-2023-50224TP-Link / TL-WR841NTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability2025-09-03
15.6%
CVE-2025-9377TP-Link / Multiple RoutersTP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability2025-09-03
33.5%
CVE-2020-24363TP-Link / TL-WA855RETP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability2025-09-02
20.7%
CVE-2025-55177Meta Platforms / WhatsAppMeta Platforms WhatsApp Incorrect Authorization Vulnerability2025-09-02
4.3%
CVE-2025-57819Sangoma / FreePBXSangoma FreePBX Authentication Bypass Vulnerability2025-08-29
85.5%
CVE-2025-7775Citrix / NetScalerCitrix NetScaler Memory Overflow Vulnerability2025-08-26
20.3%
CVE-2024-8068Citrix / Session RecordingCitrix Session Recording Improper Privilege Management Vulnerability2025-08-25
3.5%
CVE-2024-8069Citrix / Session RecordingCitrix Session Recording Deserialization of Untrusted Data Vulnerability2025-08-25
14.6%
CVE-2025-48384Git / GitGit Link Following Vulnerability2025-08-25
4.2%
CVE-2025-43300Apple / iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability2025-08-21
32.5%
CVE-2025-54948Trend Micro / Apex OneTrend Micro Apex One OS Command Injection Vulnerability2025-08-18
23.9%
CVE-2025-8875N-able / N-CentralN-able N-Central Insecure Deserialization Vulnerability2025-08-13
1.9%
CVE-2025-8876N-able / N-CentralN-able N-Central Command Injection Vulnerability2025-08-13
3.4%
CVE-2007-0671Microsoft / OfficeMicrosoft Office Excel Remote Code Execution Vulnerability2025-08-12
43.2%
CVE-2013-3893Microsoft / Internet ExplorerMicrosoft Internet Explorer Resource Management Errors Vulnerability2025-08-12
87.5%
CVE-2025-8088RARLAB / WinRARRARLAB WinRAR Path Traversal Vulnerability2025-08-12
94.1%
CVE-2020-25078D-Link / DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability2025-08-05
97.5%
CVE-2020-25079D-Link / DCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Command Injection Vulnerability2025-08-05
54.0%
CVE-2022-40799D-Link / DNR-322LD-Link DNR-322L Download of Code Without Integrity Check Vulnerability2025-08-05
33.7%
CVE-2023-2533PaperCut / NG/MFPaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability2025-07-28
28.6%
CVE-2025-20281Cisco / Identity Services EngineCisco Identity Services Engine Injection Vulnerability2025-07-28
97.6%
CVE-2025-20337Cisco / Identity Services EngineCisco Identity Services Engine Injection Vulnerability2025-07-28
67.8%
CVE-2025-2775SysAid / SysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerab…2025-07-22
42.6%
CVE-2025-2776SysAid / SysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerab…2025-07-22
64.7%
CVE-2025-49704Microsoft / SharePointMicrosoft SharePoint Code Injection Vulnerability2025-07-22
100.0%
CVE-2025-49706Microsoft / SharePointMicrosoft SharePoint Improper Authentication Vulnerability2025-07-22
99.1%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base