Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 686 vulnerabilities in this band.
- CVE-2025-48384 Git Link Following Vulnerability Git · Git
- CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability Citrix · Session Recording
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix · Session Recording
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability Trend Micro · Apex One
- CVE-2025-8876 N-able N-Central Command Injection Vulnerability N-able · N-Central
- CVE-2025-8875 N-able N-Central Insecure Deserialization Vulnerability N-able · N-Central
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft · Office
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link · DNR-322L
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut · NG/MF
- CVE-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google · Chromium
- CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass · Multi-Router Looking Glass (MRLG)
- CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage · TM SGNL
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage · TM SGNL
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability Linux · Kernel
- CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise · ScreenConnect
- CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS · Craft CMS
- CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS · RT-AX55 Routers
- CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability Srimax · Output Messenger
- CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon · Email Server
- CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability SAP · NetWeaver
- CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft · Windows
- CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage · TM SGNL
- CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability FreeType · FreeType
- CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom · Brocade Fabric OS
- CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia · Active! Mail
- CVE-2025-3928 Commvault Web Server Unspecified Vulnerability Commvault · Web Server
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability Apple · Multiple Products
- CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability Linux · Kernel
- CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability Linux · Kernel
- CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability Google · Chromium Mojo
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog · action-setup GitHub Action
- CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper · Junos OS
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple · Multiple Products
- CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft · Windows
- CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive · VeraCore
- CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · ESXi, Workstation, and Fusion
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · ESXi and Workstation
- CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability Linux · Kernel
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks · PAN-OS
- CVE-2025-23209 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple · iOS and iPadOS
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability Mitel · SIP Phones
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble · Cityworks
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability Sophos · XG Firewall
- CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability Sophos · CyberoamOS
- CVE-2022-23748 Dante Discovery Process Control Vulnerability Audinate · Dante Discovery
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems · USAHERDS
- CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink · RLC-410W IP Camera
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink · Multiple IP Cameras
- CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO · NVRmini2 Devices
- CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid · Proself
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple · Multiple Products
- CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability VMware · vCenter Server
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2024-43093 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability ScienceLogic · SL1
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP · Commerce Cloud
- CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity Adobe · Flash Player
- CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability Adobe · Flash Player
- CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe · Flash Player
- CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft · Publisher
- CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability Kingsoft · WPS Office
- CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google · Chromium V8
- CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability Versa · Director
- CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability Microsoft · Exchange Server
- CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux · Kernel
- CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft · Windows
Nothing on this page matches that filter.