Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-41244 Exploited |
Not yet scored | Broadcom VMware Aria Operations and VMware Tools Operating systems & software |
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 30 Oct 2025 |
| CVE-2025-24893 Exploited |
Not yet scored | XWiki Platform Operating systems & software |
XWiki Platform Eval Injection Vulnerability | 30 Oct 2025 |
| CVE-2025-6204 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | 28 Oct 2025 |
| CVE-2025-6205 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | 28 Oct 2025 |
| CVE-2025-54236 Exploited |
Not yet scored | Adobe Commerce and Magento Applications & supply chain |
Adobe Commerce and Magento Improper Input Validation Vulnerability | 24 Oct 2025 |
| CVE-2025-59287 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 24 Oct 2025 |
| CVE-2025-61932 Exploited |
Not yet scored | Motex LANSCOPE Endpoint Manager Operating systems & software |
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | 22 Oct 2025 |
| CVE-2025-61884 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2025 |
| CVE-2022-48503 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Unspecified Vulnerability | 20 Oct 2025 |
| CVE-2025-2746 Exploited |
Not yet scored | Kentico Xperience CMS Operating systems & software |
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 20 Oct 2025 |
| CVE-2025-2747 Exploited |
Not yet scored | Kentico Xperience CMS Operating systems & software |
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 20 Oct 2025 |
| CVE-2025-33073 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SMB Client Improper Access Control Vulnerability | 20 Oct 2025 |
| CVE-2025-54253 Exploited |
Not yet scored | Adobe Experience Manager (AEM) Forms Operating systems & software |
Adobe Experience Manager Forms Code Execution Vulnerability | 15 Oct 2025 |
| CVE-2025-47827 Exploited |
Not yet scored | IGEL IGEL OS Operating systems & software |
IGEL OS Use of a Key Past its Expiration Date Vulnerability | 14 Oct 2025 |
| CVE-2025-24990 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Untrusted Pointer Dereference Vulnerability | 14 Oct 2025 |
| CVE-2025-59230 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Access Control Vulnerability | 14 Oct 2025 |
| CVE-2016-7836 Exploited |
Not yet scored | SKYSEA Client View Operating systems & software |
SKYSEA Client View Improper Authentication Vulnerability | 14 Oct 2025 |
| CVE-2021-43798 Exploited |
Not yet scored | Grafana Labs Grafana Operating systems & software |
Grafana Path Traversal Vulnerability | 9 Oct 2025 |
| CVE-2025-27915 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) OT, ICS & IoT |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 7 Oct 2025 |
| CVE-2010-3765 Exploited |
Not yet scored | Mozilla Multiple Products Operating systems & software |
Mozilla Multiple Products Remote Code Execution Vulnerability | 6 Oct 2025 |
| CVE-2021-22555 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Heap Out-of-Bounds Write Vulnerability | 6 Oct 2025 |
| CVE-2010-3962 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 6 Oct 2025 |
| CVE-2021-43226 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 6 Oct 2025 |
| CVE-2013-3918 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Out-of-Bounds Write Vulnerability | 6 Oct 2025 |
| CVE-2011-3402 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 6 Oct 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.