CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2025-33053 |
Microsoft | Windows | — | 0.8701 | 2025-06-10 | 2025-07-01 | |
CVE-2025-24016 |
Wazuh | Wazuh Server | — | 0.9384 | 2025-06-10 | 2025-07-01 | |
CVE-2024-42009 |
Roundcube | Webmail | — | 0.8288 | 2025-06-09 | 2025-06-30 | |
CVE-2025-32433 |
Erlang | Erlang/OTP | — | 0.9892 | 2025-06-09 | 2025-06-30 | |
CVE-2025-5419 |
Chromium V8 | — | 0.0749 | 2025-06-05 | 2025-06-26 | ||
CVE-2025-21479 |
Qualcomm | Multiple Chipsets | — | 0.0084 | 2025-06-03 | 2025-06-24 | |
CVE-2025-21480 |
Qualcomm | Multiple Chipsets | — | 0.0046 | 2025-06-03 | 2025-06-24 | |
CVE-2025-27038 |
Qualcomm | Multiple Chipsets | — | 0.0114 | 2025-06-03 | 2025-06-24 | |
CVE-2021-32030 |
ASUS | Routers | — | 0.9939 | 2025-06-02 | 2025-06-23 | |
CVE-2025-3935 |
ConnectWise | ScreenConnect | — | 0.0360 | 2025-06-02 | 2025-06-23 | |
CVE-2025-35939 |
Craft CMS | Craft CMS | — | 0.0135 | 2025-06-02 | 2025-06-23 | |
CVE-2024-56145 |
Craft CMS | Craft CMS | — | 0.9740 | 2025-06-02 | 2025-06-23 | |
CVE-2023-39780 |
ASUS | RT-AX55 Routers | — | 0.3951 | 2025-06-02 | 2025-06-23 | |
CVE-2025-4632 |
Samsung | MagicINFO 9 Server | — | 0.2407 | 2025-05-22 | 2025-06-12 | |
CVE-2023-38950 |
ZKTeco | BioTime | — | 0.9247 | 2025-05-19 | 2025-06-09 | |
CVE-2024-27443 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.2461 | 2025-05-19 | 2025-06-09 | |
CVE-2025-27920 |
Srimax | Output Messenger | — | 0.0186 | 2025-05-19 | 2025-06-09 | |
CVE-2024-11182 |
MDaemon | Email Server | — | 0.3326 | 2025-05-19 | 2025-06-09 | |
CVE-2025-4428 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.8800 | 2025-05-19 | 2025-06-09 | |
CVE-2025-4427 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9993 | 2025-05-19 | 2025-06-09 | |
CVE-2025-42999 |
SAP | NetWeaver | — | 0.1285 | 2025-05-15 | 2025-06-05 | RW |
CVE-2024-12987 |
DrayTek | Vigor Routers | — | 0.9816 | 2025-05-15 | 2025-06-05 | |
CVE-2025-32756 |
Fortinet | Multiple Products | — | 0.3094 | 2025-05-14 | 2025-06-04 | |
CVE-2025-32709 |
Microsoft | Windows | — | 0.0182 | 2025-05-13 | 2025-06-03 | |
CVE-2025-30397 |
Microsoft | Windows | — | 0.2726 | 2025-05-13 | 2025-06-03 | |
CVE-2025-32706 |
Microsoft | Windows | — | 0.0233 | 2025-05-13 | 2025-06-03 | |
CVE-2025-32701 |
Microsoft | Windows | — | 0.0142 | 2025-05-13 | 2025-06-03 | |
CVE-2025-30400 |
Microsoft | Windows | — | 0.0192 | 2025-05-13 | 2025-06-03 | |
CVE-2025-47729 |
TeleMessage | TM SGNL | — | 0.0045 | 2025-05-12 | 2025-06-02 | |
CVE-2024-11120 |
GeoVision | Multiple Devices | — | 0.2839 | 2025-05-07 | 2025-05-28 | |
CVE-2024-6047 |
GeoVision | Multiple Devices | — | 0.1007 | 2025-05-07 | 2025-05-28 | |
CVE-2025-27363 |
FreeType | FreeType | — | 0.2777 | 2025-05-06 | 2025-05-27 | |
CVE-2025-3248 |
Langflow | Langflow | — | 0.9999 | 2025-05-05 | 2025-05-26 | RW |
CVE-2025-34028 |
Commvault | Command Center | — | 0.9760 | 2025-05-02 | 2025-05-23 | |
CVE-2024-58136 |
Yiiframework | Yii | — | 0.8776 | 2025-05-02 | 2025-05-23 | |
CVE-2024-38475 |
Apache | HTTP Server | — | 0.9996 | 2025-05-01 | 2025-05-22 | |
CVE-2023-44221 |
SonicWall | SMA100 Appliances | — | 0.7625 | 2025-05-01 | 2025-05-22 | |
CVE-2025-31324 |
SAP | NetWeaver | — | 0.9949 | 2025-04-29 | 2025-05-20 | RW |
CVE-2025-1976 |
Broadcom | Brocade Fabric OS | — | 0.0069 | 2025-04-28 | 2025-05-19 | |
CVE-2025-42599 |
Qualitia | Active! Mail | — | 0.0336 | 2025-04-28 | 2025-05-19 | |
CVE-2025-3928 |
Commvault | Web Server | — | 0.0253 | 2025-04-28 | 2025-05-19 | |
CVE-2025-24054 |
Microsoft | Windows | — | 0.6227 | 2025-04-17 | 2025-05-08 | |
CVE-2025-31201 |
Apple | Multiple Products | — | 0.1397 | 2025-04-17 | 2025-05-08 | |
CVE-2025-31200 |
Apple | Multiple Products | — | 0.2090 | 2025-04-17 | 2025-05-08 | |
CVE-2021-20035 |
SonicWall | SMA100 Appliances | — | 0.0441 | 2025-04-16 | 2025-05-07 | |
CVE-2024-53150 |
Linux | Kernel | — | 0.0135 | 2025-04-09 | 2025-04-30 | |
CVE-2024-53197 |
Linux | Kernel | — | 0.0412 | 2025-04-09 | 2025-04-30 | |
CVE-2025-29824 |
Microsoft | Windows | — | 0.1925 | 2025-04-08 | 2025-04-29 | RW |
CVE-2025-30406 |
Gladinet | CentreStack | — | 0.9434 | 2025-04-08 | 2025-04-29 | |
CVE-2025-31161 |
CrushFTP | CrushFTP | — | 0.9997 | 2025-04-07 | 2025-04-28 | RW |