Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-48503 | Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may… | Apple / Multiple Products | Oct 20, 2025 | — | View → |
| CVE-2025-2746 | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to… | Kentico / Xperience CMS | Oct 20, 2025 | — | View → |
| CVE-2025-2747 | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to… | Kentico / Xperience CMS | Oct 20, 2025 | — | View → |
| CVE-2025-33073 | Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker… | Microsoft / Windows | Oct 20, 2025 | — | View → |
| CVE-2025-61884 | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This… | Oracle / E-Business Suite | Oct 20, 2025 | Ransomware | View → |
| CVE-2025-54253 | Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. | Adobe / Experience Manager (AEM) Forms | Oct 15, 2025 | — | View → |
| CVE-2016-7836 | SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing… | SKYSEA / Client View | Oct 14, 2025 | — | View → |
| CVE-2025-24990 | Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An… | Microsoft / Windows | Oct 14, 2025 | — | View → |
| CVE-2025-47827 | IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module… | IGEL / IGEL OS | Oct 14, 2025 | — | View → |
| CVE-2025-59230 | Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an… | Microsoft / Windows | Oct 14, 2025 | — | View → |
| CVE-2021-43798 | Grafana contains a path traversal vulnerability that could allow access to local files. | Grafana Labs / Grafana | Oct 9, 2025 | — | View → |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to… | Synacor / Zimbra Collaboration Suite (ZCS) | Oct 7, 2025 | — | View → |
| CVE-2010-3765 | Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers… | Mozilla / Multiple Products | Oct 6, 2025 | — | View → |
| CVE-2010-3962 | Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The… | Microsoft / Internet Explorer | Oct 6, 2025 | — | View → |
| CVE-2011-3402 | Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode… | Microsoft / Windows | Oct 6, 2025 | — | View → |
| CVE-2013-3918 | Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An… | Microsoft / Windows | Oct 6, 2025 | — | View → |
| CVE-2021-22555 | Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap… | Linux / Kernel | Oct 6, 2025 | — | View → |
| CVE-2021-43226 | Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged… | Microsoft / Windows | Oct 6, 2025 | Ransomware | View → |
| CVE-2025-61882 | Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows… | Oracle / E-Business Suite | Oct 6, 2025 | Ransomware | View → |
| CVE-2014-6278 | GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted… | GNU / GNU Bash | Oct 2, 2025 | — | View → |