CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2025-24983 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-24983)
Vulnerability in Microsoft Windows (CVE-2025-24983). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24984 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-24984)
Vulnerability in Microsoft Windows (CVE-2025-24984). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24985 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-24985)
Vulnerability in Microsoft Windows (CVE-2025-24985). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24991 KEV |
[KEV] Out-of-Bounds Read in Microsoft Windows (CVE-2025-24991)
Vulnerability in Microsoft Windows (CVE-2025-24991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24993 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-24993)
Vulnerability in Microsoft Windows (CVE-2025-24993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-25181 KEV |
[KEV] SQL Injection in Advantive VeraCore (CVE-2025-25181)
SQL injection in Advantive VeraCore (CVE-2025-25181). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-57968 KEV |
[KEV] Unrestricted File Upload in Advantive VeraCore (CVE-2024-57968)
Vulnerability in Advantive VeraCore (CVE-2024-57968). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-13159 KEV |
[KEV] Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13159)
Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13159). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-13160 KEV |
[KEV] Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13160)
Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13160). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-13161 KEV |
[KEV] Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13161)
Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2024-13161). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-50302 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2024-50302)
Vulnerability in Linux Kernel (CVE-2024-50302). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to :2025-03-05 or later.
|
|
| CVE-2025-22224 KEV |
[KEV] Vulnerability in VMware ESXi and Workstation (CVE-2025-22224)
Vulnerability in VMware ESXi and Workstation (CVE-2025-22224). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-22225 KEV |
[KEV] Vulnerability in VMware ESXi (CVE-2025-22225)
Vulnerability in VMware ESXi (CVE-2025-22225). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-22226 KEV |
[KEV] Out-of-Bounds Read in VMware ESXi, Workstation, and Fusion (CVE-2025-22226)
Vulnerability in VMware ESXi, Workstation, and Fusion (CVE-2025-22226). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-20118 KEV |
[KEV] Command Injection in Cisco Small Business RV Series Routers (CVE-2023-20118)
Command injection in Cisco Small Business RV Series Routers (CVE-2023-20118). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-43939 KEV |
[KEV] Vulnerability in Hitachi Vantara Pentaho Business Analytics (BA) Server (CVE-2022-43939)
Vulnerability in Hitachi Vantara Pentaho Business Analytics (BA) Server (CVE-2022-43939). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-43769 KEV |
[KEV] Vulnerability in Hitachi Vantara Pentaho Business Analytics (BA) Server (CVE-2022-43769)
Vulnerability in Hitachi Vantara Pentaho Business Analytics (BA) Server (CVE-2022-43769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8639 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2018-8639)
Vulnerability in Microsoft Windows (CVE-2018-8639). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-4885 KEV |
[KEV] Path Traversal in Progress WhatsUp Gold (CVE-2024-4885)
Path traversal in Progress WhatsUp Gold (CVE-2024-4885). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-49035 KEV |
[KEV] Privilege Escalation in Microsoft Partner Center (CVE-2024-49035)
Vulnerability in Microsoft Partner Center (CVE-2024-49035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-34192 KEV |
[KEV] Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2023-34192)
Cross-site scripting in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2023-34192). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-3066 KEV |
[KEV] Unsafe Deserialization in Adobe ColdFusion (CVE-2017-3066)
Vulnerability in Adobe ColdFusion (CVE-2017-3066). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-20953 KEV |
[KEV] Unsafe Deserialization in Oracle Agile Product Lifecycle Management (PLM) (CVE-2024-20953)
Vulnerability in Oracle Agile Product Lifecycle Management (PLM) (CVE-2024-20953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24989 KEV |
[KEV] Vulnerability in Microsoft Power Pages (CVE-2025-24989)
Vulnerability in Microsoft Power Pages (CVE-2025-24989). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-23209 KEV |
[KEV] Code Injection in Craft CMS (CVE-2025-23209)
Code injection in Craft CMS (CVE-2025-23209). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-0111 KEV |
[KEV] Vulnerability in Palo Alto Networks PAN-OS (CVE-2025-0111)
Vulnerability in Palo Alto Networks PAN-OS (CVE-2025-0111). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-53704 KEV |
[KEV] Authentication Bypass in SonicWall SonicOS (CVE-2024-53704)
Authentication bypass in SonicWall SonicOS (CVE-2024-53704). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-0108 KEV |
[KEV] Vulnerability in Palo Alto Networks PAN-OS (CVE-2025-0108)
Vulnerability in Palo Alto Networks PAN-OS (CVE-2025-0108). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-57727 KEV |
[KEV] Path Traversal in SimpleHelp (CVE-2024-57727)
Path traversal in SimpleHelp (CVE-2024-57727). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-41710 KEV |
[KEV] Vulnerability in Mitel SIP Phones (CVE-2024-41710)
Vulnerability in Mitel SIP Phones (CVE-2024-41710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24200 KEV |
[KEV] Authorization Flaw in Apple iOS and iPadOS (CVE-2025-24200)
Vulnerability in Apple iOS and iPadOS (CVE-2025-24200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21391 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-21391)
Vulnerability in Microsoft Windows (CVE-2025-21391). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21418 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-21418)
Vulnerability in Microsoft Windows (CVE-2025-21418). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-40890 KEV |
[KEV] OS Command Injection in Zyxel DSL CPE Devices (CVE-2024-40890)
OS command injection in Zyxel DSL CPE Devices (CVE-2024-40890). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-40891 KEV |
[KEV] OS Command Injection in Zyxel DSL CPE Devices (CVE-2024-40891)
OS command injection in Zyxel DSL CPE Devices (CVE-2024-40891). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-0994 KEV |
[KEV] Unsafe Deserialization in Trimble Cityworks (CVE-2025-0994)
Vulnerability in Trimble Cityworks (CVE-2025-0994). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-0411 KEV |
[KEV] Vulnerability in 7-Zip (CVE-2025-0411)
Vulnerability in 7-Zip (CVE-2025-0411). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-23748 KEV |
[KEV] Vulnerability in Audinate Dante Discovery (CVE-2022-23748)
Vulnerability in Audinate Dante Discovery (CVE-2022-23748). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-21413 KEV |
[KEV] Vulnerability in Microsoft Office Outlook (CVE-2024-21413)
Vulnerability in Microsoft Office Outlook (CVE-2024-21413). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-29574 KEV |
[KEV] SQL Injection in Sophos CyberoamOS (CVE-2020-29574)
SQL injection in Sophos CyberoamOS (CVE-2020-29574). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-15069 KEV |
[KEV] Vulnerability in Sophos XG Firewall (CVE-2020-15069)
Vulnerability in Sophos XG Firewall (CVE-2020-15069). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-53104 KEV |
[KEV] Out-of-Bounds Write in Linux Kernel (CVE-2024-53104)
Out-of-bounds write in Linux Kernel (CVE-2024-53104). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-45195 KEV |
[KEV] Vulnerability in Apache OFBiz (CVE-2024-45195)
Vulnerability in Apache OFBiz (CVE-2024-45195). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-29059 KEV |
[KEV] Vulnerability in Microsoft .NET Framework (CVE-2024-29059)
Vulnerability in Microsoft .NET Framework (CVE-2024-29059). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-9276 KEV |
[KEV] OS Command Injection in Paessler PRTG Network Monitor (CVE-2018-9276)
OS command injection in Paessler PRTG Network Monitor (CVE-2018-9276). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19410 KEV |
[KEV] Vulnerability in Paessler PRTG Network Monitor (CVE-2018-19410)
Vulnerability in Paessler PRTG Network Monitor (CVE-2018-19410). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24085 KEV |
[KEV] Use-After-Free in Apple Multiple Products (CVE-2025-24085)
Vulnerability in Apple Multiple Products (CVE-2025-24085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-23006 KEV |
[KEV] Unsafe Deserialization in SonicWall SMA1000 Appliances (CVE-2025-23006)
Vulnerability in SonicWall SMA1000 Appliances (CVE-2025-23006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-11023 KEV |
[KEV] Cross-Site Scripting (XSS) in Jquery (CVE-2020-11023)
Cross-site scripting in Jquery (CVE-2020-11023). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-50603 KEV |
[KEV] OS Command Injection in Aviatrix Controllers (CVE-2024-50603)
OS command injection in Aviatrix Controllers (CVE-2024-50603). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
