Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-43798 Exploited |
Not yet scored | Grafana Labs Grafana Operating systems & software |
Grafana Path Traversal Vulnerability | 9 Oct 2025 |
| CVE-2025-27915 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) OT, ICS & IoT |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 7 Oct 2025 |
| CVE-2021-22555 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Heap Out-of-Bounds Write Vulnerability | 6 Oct 2025 |
| CVE-2011-3402 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 6 Oct 2025 |
| CVE-2013-3918 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Out-of-Bounds Write Vulnerability | 6 Oct 2025 |
| CVE-2010-3765 Exploited |
Not yet scored | Mozilla Multiple Products Operating systems & software |
Mozilla Multiple Products Remote Code Execution Vulnerability | 6 Oct 2025 |
| CVE-2010-3962 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 6 Oct 2025 |
| CVE-2021-43226 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 6 Oct 2025 |
| CVE-2025-61882 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Unspecified Vulnerability | 6 Oct 2025 |
| CVE-2017-1000353 Exploited |
Not yet scored | Jenkins Jenkins Applications & supply chain |
Jenkins Remote Code Execution Vulnerability | 2 Oct 2025 |
| CVE-2025-21043 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 2 Oct 2025 |
| CVE-2014-6278 Exploited |
Not yet scored | GNU GNU Bash Operating systems & software |
GNU Bash OS Command Injection Vulnerability | 2 Oct 2025 |
| CVE-2025-4008 Exploited |
Not yet scored | Smartbedded Meteobridge Operating systems & software |
Smartbedded Meteobridge Command Injection Vulnerability | 2 Oct 2025 |
| CVE-2015-7755 Exploited |
Not yet scored | Juniper ScreenOS Network & security devices |
Juniper ScreenOS Improper Authentication Vulnerability | 2 Oct 2025 |
| CVE-2025-59689 Exploited |
Not yet scored | Libraesva Email Security Gateway Network & security devices |
Libraesva Email Security Gateway Command Injection Vulnerability | 29 Sep 2025 |
| CVE-2021-21311 Exploited |
Not yet scored | Adminer Adminer Operating systems & software |
Adminer Server-Side Request Forgery Vulnerability | 29 Sep 2025 |
| CVE-2025-20352 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 29 Sep 2025 |
| CVE-2025-32463 Exploited |
Not yet scored | Sudo Sudo Operating systems & software |
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 29 Sep 2025 |
| CVE-2025-10035 Exploited |
Not yet scored | Fortra GoAnywhere MFT Operating systems & software |
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 29 Sep 2025 |
| CVE-2025-20362 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 25 Sep 2025 |
| CVE-2025-20333 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 25 Sep 2025 |
| CVE-2025-10585 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 23 Sep 2025 |
| CVE-2025-5086 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 11 Sep 2025 |
| CVE-2025-48543 Exploited |
Not yet scored | Android Runtime Operating systems & software |
Android Runtime Use-After-Free Vulnerability | 4 Sep 2025 |
| CVE-2025-38352 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 4 Sep 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.