Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
35exploited in the last 30 days
13critical (CVSS ≥ 9)
0used in ransomware
1769in the KEV catalog
CVE-2025-33073Severity under analysisadded on 10/20/2025
Microsoft Windows SMB Client Improper Access Control Vulnerability
Microsoft · Windows · CWE-284
Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.
CVE-2025-54253Severity under analysisadded on 10/15/2025
Adobe Experience Manager Forms Code Execution Vulnerability
Adobe · Experience Manager (AEM) Forms
Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.
CVE-2025-59230Severity under analysisadded on 10/14/2025
Microsoft Windows Improper Access Control Vulnerability
Microsoft · Windows · CWE-284
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.
CVE-2025-24990Severity under analysisadded on 10/14/2025
Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · CWE-822
Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.
CVE-2025-61882Severity under analysisRansomwareadded on 10/06/2025
Oracle E-Business Suite Unspecified Vulnerability
Oracle · E-Business Suite
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
CVE-2021-43226Severity under analysisRansomwareadded on 10/06/2025
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.
CVE-2021-22555Severity under analysisadded on 10/06/2025
Linux Kernel Heap Out-of-Bounds Write Vulnerability
Linux · Kernel · CWE-787
Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
CVE-2013-3918Severity under analysisadded on 10/06/2025
Microsoft Windows Out-of-Bounds Write Vulnerability
Microsoft · Windows
Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
CVE-2011-3402Severity under analysisadded on 10/06/2025
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.
CVE-2010-3962Severity under analysisadded on 10/06/2025
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
Microsoft · Internet Explorer
Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
CVE-2015-7755Severity under analysisadded on 10/02/2025
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
CVE-2025-20352Severity under analysisadded on 09/29/2025
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Cisco · IOS and IOS XE · CWE-121
Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.
CVE-2025-20362Severity under analysisadded on 09/25/2025
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.
CVE-2025-20333Severity under analysisadded on 09/25/2025
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.
CVE-2025-10585Severity under analysisadded on 09/23/2025
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · CWE-843
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
CVE-2025-38352Severity under analysisadded on 09/04/2025
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux · Kernel · CWE-367
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
CVE-2025-7775Severity under analysisadded on 08/26/2025
Citrix NetScaler Memory Overflow Vulnerability
Citrix · NetScaler · CWE-119
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
CVE-2024-8069Severity under analysisadded on 08/25/2025
Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Citrix · Session Recording · CWE-502
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
CVE-2024-8068Severity under analysisadded on 08/25/2025
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
CVE-2013-3893Severity under analysisadded on 08/12/2025
Microsoft Internet Explorer Resource Management Errors Vulnerability
Microsoft · Internet Explorer · CWE-399
Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
CVE-2007-0671Severity under analysisadded on 08/12/2025
Microsoft Office Excel Remote Code Execution Vulnerability
Microsoft · Office
Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.
CVE-2025-20337Severity under analysisadded on 07/28/2025
Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
CVE-2025-20281Severity under analysisadded on 07/28/2025
Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
CVE-2025-6558Severity under analysisadded on 07/22/2025
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
Google · Chromium · CWE-20
Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Want to know if your environment is exposed?
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more
Your privacy matters
We use essential cookies to make the site work and, with your permission, Google cookies to measure traffic and show ads — including personalized ones — that keep the tools free. You can change your choice at any time under “Cookie preferences” in the footer. Learn more.
