CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
548
Critical
507
Exploited in Wild
507
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-9242 | CRITICAL | WatchGuard | 9.8 | KEV | Yes | ✓ | September 17, 2025 | Patch |
| CVE-2025-21043 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | September 12, 2025 | Patch |
| CVE-2025-21042 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | September 12, 2025 | Patch |
| CVE-2025-57819 | CRITICAL | Sangoma | 9.8 | KEV | Yes | ✓ | August 28, 2025 | Patch |
| CVE-2025-7775 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | August 26, 2025 | Patch |
| CVE-2025-54948 | CRITICAL | Trend Micro | 9.8 | KEV | Yes | ✓ | August 5, 2025 | Patch |
| CVE-2025-53770 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 20, 2025 | Patch |
| CVE-2025-54309 | CRITICAL | CrushFTP | 9.8 | KEV | Yes | ✓ | July 18, 2025 | Patch |
| CVE-2025-54068 | CRITICAL | Laravel | 9.8 | KEV | Yes | ✓ | July 17, 2025 | Patch |
| CVE-2025-25257 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | July 17, 2025 | Patch |
| CVE-2025-6543 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | June 25, 2025 | Patch |
| CVE-2025-32756 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-4632 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-2776 | CRITICAL | SysAid | 9.8 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2025-42599 | CRITICAL | Qualitia | 9.8 | KEV | Yes | ✓ | April 18, 2025 | Patch |
| CVE-2025-31201 | CRITICAL | Apple | 9.8 | KEV | Yes | ✓ | April 16, 2025 | Patch |
| CVE-2025-31200 | CRITICAL | Apple | 9.8 | KEV | Yes | ✓ | April 16, 2025 | Patch |
| CVE-2024-58136 | CRITICAL | Yiiframework | 9.8 | KEV | Yes | ✓ | April 10, 2025 | Patch |
| CVE-2025-3248 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | April 7, 2025 | Patch |
| CVE-2025-31161 | CRITICAL | CrushFTP | 9.8 | KEV | Yes | ✓ | April 3, 2025 | Patch |
| CVE-2025-30406 | CRITICAL | Gladinet | 9.8 | KEV | Yes | ✓ | April 3, 2025 | Patch |
| CVE-2025-2747 | CRITICAL | Kentico | 9.8 | KEV | Yes | ✓ | March 24, 2025 | Patch |
| CVE-2025-2746 | CRITICAL | Kentico | 9.8 | KEV | Yes | ✓ | March 24, 2025 | Patch |
| CVE-2024-54085 | CRITICAL | AMI | 9.8 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-1316 | CRITICAL | Edimax | 9.8 | KEV | Yes | ✓ | March 5, 2025 | Patch |
| CVE-2025-24893 | CRITICAL | XWiki | 9.8 | KEV | Yes | ✓ | February 20, 2025 | Patch |
| CVE-2025-24989 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | February 19, 2025 | Patch |
| CVE-2025-23006 | CRITICAL | SonicWall | 9.8 | KEV | Yes | ✓ | January 23, 2025 | Patch |
| CVE-2024-13161 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-13160 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-13159 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-55591 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-53704 | CRITICAL | SonicWall | 9.8 | KEV | Yes | ✓ | January 9, 2025 | Patch |
| CVE-2024-12987 | CRITICAL | DrayTek | 9.8 | KEV | Yes | ✓ | December 27, 2024 | Patch |
| CVE-2024-56145 | CRITICAL | Craft CMS | 9.8 | KEV | Yes | ✓ | December 18, 2024 | Patch |
| CVE-2024-12356 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | December 17, 2024 | Patch |
| CVE-2024-55956 | CRITICAL | Cleo | 9.8 | KEV | Yes | ✓ | December 13, 2024 | Patch |
| CVE-2024-11667 | CRITICAL | Zyxel | 9.8 | KEV | Yes | ✓ | November 27, 2024 | Patch |
| CVE-2024-49035 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | November 26, 2024 | Patch |
| CVE-2024-11680 | CRITICAL | ProjectSend | 9.8 | KEV | Yes | ✓ | November 26, 2024 | Patch |
| CVE-2024-0012 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | November 18, 2024 | Patch |
| CVE-2024-11120 | CRITICAL | GeoVision | 9.8 | KEV | Yes | ✓ | November 15, 2024 | Patch |
| CVE-2024-50623 | CRITICAL | Cleo | 9.8 | KEV | Yes | ✓ | October 28, 2024 | Patch |
| CVE-2024-47575 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | October 23, 2024 | Patch |
| CVE-2024-9537 | CRITICAL | ScienceLogic | 9.8 | KEV | Yes | ✓ | October 18, 2024 | Patch |
| CVE-2024-9680 | CRITICAL | Mozilla | 9.8 | KEV | Yes | ✓ | October 9, 2024 | Patch |
| CVE-2024-43468 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | October 8, 2024 | Patch |
| CVE-2024-38813 | CRITICAL | VMware | 9.8 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-38812 | CRITICAL | VMware | 9.8 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-40711 | CRITICAL | Veeam | 9.8 | KEV | Yes | ✓ | September 7, 2024 | Patch |