Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2015-7755 | Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device. | Juniper / ScreenOS | Oct 2, 2025 | — | View → |
| CVE-2017-1000353 | Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java… | Jenkins / Jenkins | Oct 2, 2025 | — | View → |
| CVE-2025-21043 | Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute… | Samsung / Mobile Devices | Oct 2, 2025 | — | View → |
| CVE-2025-4008 | Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary… | Smartbedded / Meteobridge | Oct 2, 2025 | — | View → |
| CVE-2021-21311 | Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially… | Adminer / Adminer | Sep 29, 2025 | — | View → |
| CVE-2025-10035 | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response… | Fortra / GoAnywhere MFT | Sep 29, 2025 | Ransomware | View → |
| CVE-2025-20352 | Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that… | Cisco / IOS and IOS XE | Sep 29, 2025 | — | View → |
| CVE-2025-32463 | Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to… | Sudo / Sudo | Sep 29, 2025 | — | View → |
| CVE-2025-59689 | Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail… | Libraesva / Email Security Gateway | Sep 29, 2025 | — | View → |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer… | Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | — | View → |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing… | Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | — | View → |
| CVE-2025-10585 | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. | Google / Chromium V8 | Sep 23, 2025 | — | View → |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. | Dassault Systèmes / DELMIA Apriso | Sep 11, 2025 | — | View → |
| CVE-2025-38352 | Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality,… | Linux / Kernel | Sep 4, 2025 | — | View → |
| CVE-2025-48543 | Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation. | Android / Runtime | Sep 4, 2025 | — | View → |
| CVE-2025-53690 | Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of… | Sitecore / Multiple Products | Sep 4, 2025 | — | View → |
| CVE-2023-50224 | TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by… | TP-Link / TL-WR841N | Sep 3, 2025 | — | View → |
| CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The… | TP-Link / Multiple Routers | Sep 3, 2025 | — | View → |
| CVE-2020-24363 | TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an… | TP-Link / TL-WA855RE | Sep 2, 2025 | — | View → |
| CVE-2025-55177 | Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device… | Meta Platforms / WhatsApp | Sep 2, 2025 | — | View → |