Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2024-48248 | NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files. | NAKIVO / Backup and Replication | Mar 19, 2025 | — | View → |
| CVE-2025-1316 | Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to… | Edimax / IC-7100 IP Camera | Mar 19, 2025 | — | View → |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin… | Fortinet / FortiOS and FortiProxy | Mar 18, 2025 | Ransomware | View → |
| CVE-2025-30066 | tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets… | tj-actions / changed-files GitHub Action | Mar 18, 2025 | — | View → |
| CVE-2025-21590 | Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker… | Juniper / Junos OS | Mar 13, 2025 | — | View → |
| CVE-2025-24201 | Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously… | Apple / Multiple Products | Mar 13, 2025 | — | View → |
| CVE-2025-24983 | Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges… | Microsoft / Windows | Mar 11, 2025 | — | View → |
| CVE-2025-24984 | Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows… | Microsoft / Windows | Mar 11, 2025 | — | View → |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized… | Microsoft / Windows | Mar 11, 2025 | — | View → |
| CVE-2025-24991 | Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to… | Microsoft / Windows | Mar 11, 2025 | — | View → |
| CVE-2025-24993 | Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized… | Microsoft / Windows | Mar 11, 2025 | — | View → |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to… | Microsoft / Windows | Mar 11, 2025 | Ransomware | View → |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak… | Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | — | View → |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak… | Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | — | View → |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak… | Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | — | View → |
| CVE-2024-57968 | Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to… | Advantive / VeraCore | Mar 10, 2025 | — | View → |
| CVE-2025-25181 | Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL… | Advantive / VeraCore | Mar 10, 2025 | — | View → |
| CVE-2024-50302 | The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially… | Linux / Kernel | Mar 4, 2025 | — | View → |
| CVE-2025-22224 | VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds… | VMware / ESXi and Workstation | Mar 4, 2025 | — | View → |
| CVE-2025-22225 | VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process… | VMware / ESXi | Mar 4, 2025 | Ransomware | View → |