Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 13:55:58 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL — IGEL OS
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from…
CVE-2025-24990 · KEV 2025-10-14Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft — Windows
Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.
CVE-2016-7836 · KEV 2025-10-14SKYSEA Client View Improper Authentication Vulnerability
SKYSEA — Client View
SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
CVE-2021-43798 · KEV 2025-10-09Grafana Path Traversal Vulnerability
Grafana Labs — Grafana
Grafana contains a path traversal vulnerability that could allow access to local files.
CVE-2025-27915 · KEV 2025-10-07Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor — Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a mal…
CVE-2025-61882 · KEV 2025-10-06Oracle E-Business Suite Unspecified Vulnerability
Oracle — E-Business Suite
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful a…
Ransomware use reportedCVE-2021-43226 · KEV 2025-10-06Microsoft Windows Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.
Ransomware use reportedCVE-2021-22555 · KEV 2025-10-06Linux Kernel Heap Out-of-Bounds Write Vulnerability
Linux — Kernel
Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
CVE-2013-3918 · KEV 2025-10-06Microsoft Windows Out-of-Bounds Write Vulnerability
Microsoft — Windows
Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user view…
CVE-2011-3402 · KEV 2025-10-06Microsoft Windows Remote Code Execution Vulnerability
Microsoft — Windows
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or w…
CVE-2010-3962 · KEV 2025-10-06Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product …
CVE-2010-3765 · KEV 2025-10-06Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla — Multiple Products
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChi…
CVE-2025-4008 · KEV 2025-10-02Smartbedded Meteobridge Command Injection Vulnerability
Smartbedded — Meteobridge
Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.
CVE-2025-21043 · KEV 2025-10-02Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung — Mobile Devices
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
CVE-2017-1000353 · KEV 2025-10-02Jenkins Remote Code Execution Vulnerability
Jenkins — Jenkins
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputS…
CVE-2015-7755 · KEV 2025-10-02Juniper ScreenOS Improper Authentication Vulnerability
Juniper — ScreenOS
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
CVE-2014-6278 · KEV 2025-10-02GNU Bash OS Command Injection Vulnerability
GNU — GNU Bash
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.
CVE-2025-59689 · KEV 2025-09-29Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva — Email Security Gateway
Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.
CVE-2025-32463 · KEV 2025-09-29Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo — Sudo
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in…
CVE-2025-20352 · KEV 2025-09-29Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Cisco — IOS and IOS XE
Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-pri…
CVE-2025-10035 · KEV 2025-09-29Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
Fortra — GoAnywhere MFT
Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.
Ransomware use reportedCVE-2021-21311 · KEV 2025-09-29Adminer Server-Side Request Forgery Vulnerability
Adminer — Adminer
Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.
CVE-2025-20362 · KEV 2025-09-25Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
Cisco — Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.
CVE-2025-20333 · KEV 2025-09-25Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Cisco — Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with…
CVE-2025-10585 · KEV 2025-09-23Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
CVE-2025-5086 · KEV 2025-09-11Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Dassault Systèmes — DELMIA Apriso
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
CVE-2025-53690 · KEV 2025-09-04Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
Sitecore — Multiple Products
Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to explo…
CVE-2025-48543 · KEV 2025-09-04Android Runtime Use-After-Free Vulnerability
Android — Runtime
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.
CVE-2025-38352 · KEV 2025-09-04Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux — Kernel
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
CVE-2025-9377 · KEV 2025-09-03TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
TP-Link — Multiple Routers
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue produc…
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.