Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2025-20393 | Cisco Multiple Products | – | – | |
| CVE-2025-59718 | Fortinet Multiple Products | – | – | |
| CVE-2025-43529 | Apple Multiple Products | – | – | |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | – | – | |
| CVE-2025-14174 | Google Chromium | – | – | |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | – | – | |
| CVE-2025-58360 | OSGeo GeoServer | – | – | |
| CVE-2025-62221 | Microsoft Windows | – | – | |
| CVE-2025-6218 | RARLAB WinRAR | – | – | |
| CVE-2025-66644 | Array Networks ArrayOS AG | – | – | |
| CVE-2022-37055 | D-Link Routers | – | – | |
| CVE-2025-55182 | Meta React Server Components | – | – | |
| CVE-2021-26828 | OpenPLC ScadaBR | – | – | |
| CVE-2025-48633 | Android Framework | – | – | |
| CVE-2025-48572 | Android Framework | – | – | |
| CVE-2021-26829 | OpenPLC ScadaBR | – | – | |
| CVE-2025-61757 | Oracle Fusion Middleware | – | – | |
| CVE-2025-13223 | Google Chromium V8 | – | – | |
| CVE-2025-58034 | Fortinet FortiWeb | – | – | |
| CVE-2025-64446 | Fortinet FortiWeb | – | – | |
| CVE-2025-9242 | WatchGuard Firebox | – | – | |
| CVE-2025-62215 | Microsoft Windows | – | – | |
| CVE-2025-12480 | Gladinet Triofox | – | – | |
| CVE-2025-21042 | Samsung Mobile Devices | – | – | |
| CVE-2025-48703 | CWP Control Web Panel | – | – | |
| CVE-2025-11371 | Gladinet CentreStack and Triofox | – | – | |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools | – | – | |
| CVE-2025-24893 | XWiki Platform | – | – | |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | – | – | |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | – | – | |
| CVE-2025-59287 | Microsoft Windows | – | – | |
| CVE-2025-54236 | Adobe Commerce and Magento | – | – | |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | – | – | |
| CVE-2025-61884 | Oracle E-Business Suite | – | – | |
| CVE-2025-33073 | Microsoft Windows | – | – | |
| CVE-2025-2747 | Kentico Xperience CMS | – | – | |
| CVE-2025-2746 | Kentico Xperience CMS | – | – | |
| CVE-2022-48503 | Apple Multiple Products | – | – | |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | – | – | |
| CVE-2025-59230 | Microsoft Windows | – | – | |
| CVE-2025-47827 | IGEL OS | – | – | |
| CVE-2025-24990 | Microsoft Windows | – | – | |
| CVE-2016-7836 | SKYSEA Client View | – | – | |
| CVE-2021-43798 | Grafana Labs Grafana | – | – | |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2025-61882 | Oracle E-Business Suite | – | – | |
| CVE-2021-43226 | Microsoft Windows | – | – | |
| CVE-2021-22555 | Linux Kernel | – | – | |
| CVE-2013-3918 | Microsoft Windows | – | – | |
| CVE-2011-3402 | Microsoft Windows | – | – |