Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2023-33538 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component… | TP-Link / Multiple Routers | Jun 16, 2025 | — | View → |
| CVE-2025-43200 | Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video… | Apple / Multiple Products | Jun 16, 2025 | — | View → |
| CVE-2025-24016 | Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers. | Wazuh / Wazuh Server | Jun 10, 2025 | — | View → |
| CVE-2025-33053 | Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a… | Microsoft / Windows | Jun 10, 2025 | — | View → |
| CVE-2024-42009 | RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails… | Roundcube / Webmail | Jun 9, 2025 | — | View → |
| CVE-2025-32433 | Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to… | Erlang / Erlang/OTP | Jun 9, 2025 | — | View → |
| CVE-2025-5419 | Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap… | Google / Chromium V8 | Jun 5, 2025 | — | View → |
| CVE-2025-21479 | Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to… | Qualcomm / Multiple Chipsets | Jun 3, 2025 | — | View → |
| CVE-2025-21480 | Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to… | Qualcomm / Multiple Chipsets | Jun 3, 2025 | — | View → |
| CVE-2025-27038 | Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering… | Qualcomm / Multiple Chipsets | Jun 3, 2025 | — | View → |
| CVE-2021-32030 | ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized… | ASUS / Routers | Jun 2, 2025 | — | View → |
| CVE-2023-39780 | ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary… | ASUS / RT-AX55 Routers | Jun 2, 2025 | — | View → |
| CVE-2024-56145 | Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini… | Craft CMS / Craft CMS | Jun 2, 2025 | — | View → |
| CVE-2025-35939 | Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated… | Craft CMS / Craft CMS | Jun 2, 2025 | — | View → |
| CVE-2025-3935 | ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection… | ConnectWise / ScreenConnect | Jun 2, 2025 | — | View → |
| CVE-2025-4632 | Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. | Samsung / MagicINFO 9 Server | May 22, 2025 | — | View → |
| CVE-2023-38950 | ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files… | ZKTeco / BioTime | May 19, 2025 | — | View → |
| CVE-2024-11182 | MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code… | MDaemon / Email Server | May 19, 2025 | — | View → |
| CVE-2024-27443 | Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user… | Synacor / Zimbra Collaboration Suite (ZCS) | May 19, 2025 | — | View → |
| CVE-2025-27920 | Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the… | Srimax / Output Messenger | May 19, 2025 | — | View → |