Updated daily · official sources
Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
CVE-2025-24054
Severity under analysis added on 04/17/2025
Microsoft · Windows · CWE-73
Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.
CVE-2021-20035
Severity under analysis added on 04/16/2025
SonicWall · SMA100 Appliances · CWE-78
SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.
CVE-2024-53197
Severity under analysis added on 04/09/2025
Linux · Kernel · CWE-787
Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.
CVE-2024-53150
Severity under analysis added on 04/09/2025
Linux · Kernel · CWE-125
Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.
CVE-2025-29824
Severity under analysis Ransomware added on 04/08/2025
Microsoft · Windows · CWE-416
Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
CVE-2025-22457
Severity under analysis Ransomware added on 04/04/2025
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.
CVE-2025-24813
Severity under analysis added on 04/01/2025
Apache · Tomcat · CWE-44, CWE-502
Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.
CVE-2024-20439
Severity under analysis added on 03/31/2025
Cisco · Smart Licensing Utility · CWE-912
Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.
CVE-2025-2783
Severity under analysis added on 03/27/2025
Google · Chromium Mojo
Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
CVE-2017-12637
Severity under analysis added on 03/19/2025
SAP · NetWeaver · CWE-22
SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.
CVE-2025-24472
Severity under analysis Ransomware added on 03/18/2025
Fortinet · FortiOS and FortiProxy · CWE-288
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.
CVE-2025-21590
Severity under analysis added on 03/13/2025
Juniper · Junos OS · CWE-653
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.
CVE-2025-26633
Severity under analysis Ransomware added on 03/11/2025
Microsoft · Windows · CWE-707
Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24993
Severity under analysis added on 03/11/2025
Microsoft · Windows · CWE-122
Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
CVE-2025-24991
Severity under analysis added on 03/11/2025
Microsoft · Windows · CWE-125
Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.
CVE-2025-24985
Severity under analysis added on 03/11/2025
Microsoft · Windows · CWE-190, CWE-122
Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.
CVE-2025-24984
Severity under analysis added on 03/11/2025
Microsoft · Windows · CWE-532
Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
CVE-2025-24983
Severity under analysis added on 03/11/2025
Microsoft · Windows · CWE-416
Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
CVE-2024-13161
Severity under analysis added on 03/10/2025
Ivanti · Endpoint Manager (EPM) · CWE-36
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-13160
Severity under analysis added on 03/10/2025
Ivanti · Endpoint Manager (EPM) · CWE-36
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-13159
Severity under analysis added on 03/10/2025
Ivanti · Endpoint Manager (EPM) · CWE-36
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
CVE-2025-22226
Severity under analysis added on 03/04/2025
VMware · ESXi, Workstation, and Fusion · CWE-125
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.
CVE-2025-22225
Severity under analysis Ransomware added on 03/04/2025
VMware · ESXi · CWE-123
VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.
CVE-2025-22224
Severity under analysis added on 03/04/2025
VMware · ESXi and Workstation · CWE-367
VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.
This product uses the NVD API but is not endorsed or certified by the NVD.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more