Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 706 vulnerabilities in this band.
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco · Multiple Products
- CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability Apple · Multiple Products
- CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless · AirLink ALEOS
- CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google · Chromium
- CVE-2025-62221 Microsoft Windows Use After Free Vulnerability Microsoft · Windows
- CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks · ArrayOS AG
- CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC · ScadaBR
- CVE-2025-48633 Android Framework Information Disclosure Vulnerability Android · Framework
- CVE-2025-48572 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC · ScadaBR
- CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-62215 Microsoft Windows Race Condition Vulnerability Microsoft · Windows
- CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom · VMware Aria Operations and VMware Tools
- CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex · LANSCOPE Endpoint Manager
- CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL · IGEL OS
- CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability Microsoft · Windows
- CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability SKYSEA · Client View
- CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability Libraesva · Email Security Gateway
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux · Kernel
- CVE-2025-48543 Android Runtime Use-After-Free Vulnerability Android · Runtime
- CVE-2023-50224 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link · TL-WR841N
- CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link · TL-WA855RE
- CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms · WhatsApp
- CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability Citrix · NetScaler
- CVE-2025-48384 Git Link Following Vulnerability Git · Git
- CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability Citrix · Session Recording
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix · Session Recording
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability Trend Micro · Apex One
- CVE-2025-8876 N-able N-Central Command Injection Vulnerability N-able · N-Central
- CVE-2025-8875 N-able N-Central Insecure Deserialization Vulnerability N-able · N-Central
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft · Office
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link · DNR-322L
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut · NG/MF
- CVE-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google · Chromium
- CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass · Multi-Router Looking Glass (MRLG)
- CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage · TM SGNL
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage · TM SGNL
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability Linux · Kernel
- CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise · ScreenConnect
- CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS · Craft CMS
- CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS · RT-AX55 Routers
- CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability Srimax · Output Messenger
- CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon · Email Server
- CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft · Windows
- CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage · TM SGNL
- CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability FreeType · FreeType
- CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom · Brocade Fabric OS
- CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia · Active! Mail
- CVE-2025-3928 Commvault Web Server Unspecified Vulnerability Commvault · Web Server
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability Apple · Multiple Products
- CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability Linux · Kernel
- CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability Linux · Kernel
- CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability Google · Chromium Mojo
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog · action-setup GitHub Action
- CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper · Junos OS
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple · Multiple Products
- CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft · Windows
- CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive · VeraCore
- CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · ESXi, Workstation, and Fusion
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · ESXi and Workstation
- CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability Linux · Kernel
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks · PAN-OS
- CVE-2025-23209 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple · iOS and iPadOS
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability Mitel · SIP Phones
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble · Cityworks
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability Sophos · XG Firewall
- CVE-2022-23748 Dante Discovery Process Control Vulnerability Audinate · Dante Discovery
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems · USAHERDS
- CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink · RLC-410W IP Camera
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink · Multiple IP Cameras
- CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO · NVRmini2 Devices
Nothing on this page matches that filter.