Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2010-3962 | Microsoft Internet Explorer | – | – | |
| CVE-2010-3765 | Mozilla Multiple Products | – | – | |
| CVE-2025-4008 | Smartbedded Meteobridge | – | – | |
| CVE-2025-21043 | Samsung Mobile Devices | – | – | |
| CVE-2017-1000353 | Jenkins | – | – | |
| CVE-2015-7755 | Juniper ScreenOS | – | – | |
| CVE-2014-6278 | GNU Bash | – | – | |
| CVE-2025-59689 | Libraesva Email Security Gateway | – | – | |
| CVE-2025-32463 | Sudo | – | – | |
| CVE-2025-20352 | Cisco IOS and IOS XE | – | – | |
| CVE-2025-10035 | Fortra GoAnywhere MFT | – | – | |
| CVE-2021-21311 | Adminer | – | – | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | – | – | |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | – | – | |
| CVE-2025-10585 | Google Chromium V8 | – | – | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | – | – | |
| CVE-2025-53690 | Sitecore Multiple Products | – | – | |
| CVE-2025-48543 | Android Runtime | – | – | |
| CVE-2025-38352 | Linux Kernel | – | – | |
| CVE-2025-9377 | TP-Link Multiple Routers | – | – | |
| CVE-2023-50224 | TP-Link TL-WR841N | – | – | |
| CVE-2025-55177 | Meta Platforms WhatsApp | – | – | |
| CVE-2020-24363 | TP-Link TL-WA855RE | – | – | |
| CVE-2025-57819 | Sangoma FreePBX | – | – | |
| CVE-2025-7775 | Citrix NetScaler | – | – | |
| CVE-2025-48384 | Git | – | – | |
| CVE-2024-8069 | Citrix Session Recording | – | – | |
| CVE-2024-8068 | Citrix Session Recording | – | – | |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | – | – | |
| CVE-2025-54948 | Trend Micro Apex One | – | – | |
| CVE-2025-8876 | N-able N-Central | – | – | |
| CVE-2025-8875 | N-able N-Central | – | – | |
| CVE-2025-8088 | RARLAB WinRAR | – | – | |
| CVE-2013-3893 | Microsoft Internet Explorer | – | – | |
| CVE-2007-0671 | Microsoft Office | – | – | |
| CVE-2022-40799 | D-Link DNR-322L | – | – | |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | – | – | |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | – | – | |
| CVE-2025-20337 | Cisco Identity Services Engine | – | – | |
| CVE-2025-20281 | Cisco Identity Services Engine | – | – | |
| CVE-2023-2533 | PaperCut NG/MF | – | – | |
| CVE-2025-6558 | Google Chromium | – | – | |
| CVE-2025-54309 | CrushFTP | – | – | |
| CVE-2025-49706 | Microsoft SharePoint | – | – | |
| CVE-2025-49704 | Microsoft SharePoint | – | – | |
| CVE-2025-2776 | SysAid On-Prem | – | – | |
| CVE-2025-2775 | SysAid On-Prem | – | – | |
| CVE-2025-53770 | Microsoft SharePoint | – | – | |
| CVE-2025-25257 | Fortinet FortiWeb | – | – | |
| CVE-2025-47812 | Wing FTP Server | – | – |