CVE-2025-48572
Added Dec 2, 2025
Android Framework Privilege Escalation Vulnerability
Android · Framework
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 6 of 35
CVE-2025-48633
Added Dec 2, 2025
Android Framework Information Disclosure Vulnerability
Android · Framework
Ransomware: Unknown
CVE-2021-26829
Added Nov 28, 2025
OpenPLC ScadaBR Cross-site Scripting Vulnerability
OpenPLC · ScadaBR
Ransomware: Unknown
CVE-2025-61757
Added Nov 21, 2025
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Oracle · Fusion Middleware
Ransomware: Unknown
CVE-2025-13223
Added Nov 19, 2025
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2025-58034
Added Nov 18, 2025
Fortinet FortiWeb OS Command Injection Vulnerability
Fortinet · FortiWeb
Ransomware: Unknown
CVE-2025-64446
Added Nov 14, 2025
Fortinet FortiWeb Path Traversal Vulnerability
Fortinet · FortiWeb
Ransomware: Unknown
CVE-2025-12480
Added Nov 12, 2025
Gladinet Triofox Improper Access Control Vulnerability
Gladinet · Triofox
Ransomware: Unknown
CVE-2025-62215
Added Nov 12, 2025
Microsoft Windows Race Condition Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-9242
Added Nov 12, 2025
WatchGuard Firebox Out-of-Bounds Write Vulnerability
WatchGuard · Firebox
Ransomware: Unknown
CVE-2025-21042
Added Nov 10, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2025-11371
Added Nov 4, 2025
Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
Gladinet · CentreStack and Triofox
Ransomware: Unknown
CVE-2025-48703
Added Nov 4, 2025
CWP Control Web Panel OS Command Injection Vulnerability
CWP · Control Web Panel
Ransomware: Unknown
CVE-2025-24893
Added Oct 30, 2025
XWiki Platform Eval Injection Vulnerability
XWiki · Platform
Ransomware: Unknown
CVE-2025-41244
Added Oct 30, 2025
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom · VMware Aria Operations and VMware Tools
Ransomware: Unknown
CVE-2025-6204
Added Oct 28, 2025
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
Dassault Systèmes · DELMIA Apriso
Ransomware: Unknown
CVE-2025-6205
Added Oct 28, 2025
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Dassault Systèmes · DELMIA Apriso
Ransomware: Unknown
CVE-2025-54236
Added Oct 24, 2025
Adobe Commerce and Magento Improper Input Validation Vulnerability
Adobe · Commerce and Magento
Ransomware: Unknown
CVE-2025-59287
Added Oct 24, 2025
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-61932
Added Oct 22, 2025
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Motex · LANSCOPE Endpoint Manager
Ransomware: Unknown
CVE-2022-48503
Added Oct 20, 2025
Apple Multiple Products Unspecified Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-2746
Added Oct 20, 2025
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Kentico · Xperience CMS
Ransomware: Unknown
CVE-2025-2747
Added Oct 20, 2025
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Kentico · Xperience CMS
Ransomware: Unknown
CVE-2025-33073
Added Oct 20, 2025
Microsoft Windows SMB Client Improper Access Control Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-61884
Added Oct 20, 2025
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Oracle · E-Business Suite
Ransomware: Known
CVE-2025-54253
Added Oct 15, 2025
Adobe Experience Manager Forms Code Execution Vulnerability
Adobe · Experience Manager (AEM) Forms
Ransomware: Unknown
CVE-2016-7836
Added Oct 14, 2025
SKYSEA Client View Improper Authentication Vulnerability
SKYSEA · Client View
Ransomware: Unknown
CVE-2025-24990
Added Oct 14, 2025
Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-47827
Added Oct 14, 2025
IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL · IGEL OS
Ransomware: Unknown
CVE-2025-59230
Added Oct 14, 2025
Microsoft Windows Improper Access Control Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2021-43798
Added Oct 9, 2025
Grafana Path Traversal Vulnerability
Grafana Labs · Grafana
Ransomware: Unknown
CVE-2025-27915
Added Oct 7, 2025
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2010-3765
Added Oct 6, 2025
Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla · Multiple Products
Ransomware: Unknown
CVE-2010-3962
Added Oct 6, 2025
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2011-3402
Added Oct 6, 2025
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2013-3918
Added Oct 6, 2025
Microsoft Windows Out-of-Bounds Write Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2021-22555
Added Oct 6, 2025
Linux Kernel Heap Out-of-Bounds Write Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2021-43226
Added Oct 6, 2025
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2025-61882
Added Oct 6, 2025
Oracle E-Business Suite Unspecified Vulnerability
Oracle · E-Business Suite
Ransomware: Known
CVE-2014-6278
Added Oct 2, 2025
GNU Bash OS Command Injection Vulnerability
GNU · GNU Bash
Ransomware: Unknown
CVE-2015-7755
Added Oct 2, 2025
Juniper ScreenOS Improper Authentication Vulnerability
Juniper · ScreenOS
Ransomware: Unknown
CVE-2017-1000353
Added Oct 2, 2025
Jenkins Remote Code Execution Vulnerability
Jenkins · Jenkins
Ransomware: Unknown
CVE-2025-21043
Added Oct 2, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2025-4008
Added Oct 2, 2025
Smartbedded Meteobridge Command Injection Vulnerability
Smartbedded · Meteobridge
Ransomware: Unknown
CVE-2021-21311
Added Sep 29, 2025
Adminer Server-Side Request Forgery Vulnerability
Adminer · Adminer
Ransomware: Unknown
CVE-2025-10035
Added Sep 29, 2025
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
Fortra · GoAnywhere MFT
Ransomware: Known
CVE-2025-20352
Added Sep 29, 2025
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Cisco · IOS and IOS XE
Ransomware: Unknown
CVE-2025-32463
Added Sep 29, 2025
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo · Sudo
Ransomware: Unknown
CVE-2025-59689
Added Sep 29, 2025
Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva · Email Security Gateway
Ransomware: Unknown
CVE-2025-20333
Added Sep 25, 2025
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.