KEV 2025

Windows Host Process for Tasks (taskhostw.exe) — Symbolic Link Abuse Leading to SYSTEM Privilege Escalation

D-Link DIR-823X (EoL) — Root RCE via Command Injection in set_prohibiting

Kentico Xperience — Authenticated Path Traversal in Staging Sync Server Leading to Remote Code Execution

Apple Multiple Products — Apple Multiple Products Buffer Overflow Vulnerability

Apple Multiple Products — Apple Multiple Products Improper Locking Vulnerability

SolarWinds Web Help Desk — SolarWinds Web Help Desk Security Control Bypass Vulnerability

Notepad++ Notepad++ — Notepad++ Download of Code Without Integrity Check Vulnerability

Roundcube Webmail — RoundCube Webmail Cross-site Scripting Vulnerability

Sangoma FreePBX Endpoint Manager — Post-Auth OS Command Injection via SSH Test Function

Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Gogs Gogs — Gogs Path Traversal Vulnerability

Versa Concerto — Versa Concerto Improper Authentication Vulnerability

Prettier eslint-config-prettier — Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Apple Multiple Products — Apple Multiple Products Use-After-Free WebKit Vulnerability

Google Chromium — Google Chromium Out of Bounds Memory Access Vulnerability

OSGeo GeoServer — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

RARLAB WinRAR — RARLAB WinRAR Path Traversal Vulnerability

Microsoft Windows — Microsoft Windows Use After Free Vulnerability

Android Framework — Android Framework Privilege Escalation Vulnerability

MongoDB MongoDB and MongoDB Server — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Array Networks ArrayOS AG — Array Networks ArrayOS AG OS Command Injection Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Samsung Mobile Devices — Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Gladinet CentreStack and Triofox — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Fortinet FortiWeb — Fortinet FortiWeb OS Command Injection Vulnerability

Microsoft Windows — Microsoft Windows Race Condition Vulnerability

Microsoft Windows — Microsoft Windows SMB Client Improper Access Control Vulnerability

Samsung Mobile Devices — Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Smartbedded Meteobridge — Smartbedded Meteobridge Command Injection Vulnerability

Dassault Systèmes DELMIA Apriso — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Broadcom VMware Aria Operations and VMware Tools — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Microsoft Windows — Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft Windows — Microsoft Windows Improper Access Control Vulnerability

Oracle E-Business Suite — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Android Runtime — Android Runtime Use-After-Free Vulnerability

Cisco IOS and IOS XE — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Linux Kernel — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

TP-Link Multiple Routers — TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

N-able N-Central — N-able N-Central Command Injection Vulnerability

RARLAB WinRAR — RARLAB WinRAR Path Traversal Vulnerability

Git — Pre-Auth RCE via Carriage Return in Submodule Path (Linux/macOS)

N-able N-Central — N-able N-Central Insecure Deserialization Vulnerability

Microsoft SharePoint — Microsoft SharePoint Code Injection Vulnerability

Google Chromium — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Citrix NetScaler ADC and Gateway — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Microsoft Windows — Microsoft Windows External Control of File Name or Path Vulnerability

Google Chromium V8 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

ConnectWise ScreenConnect — ConnectWise ScreenConnect Improper Authentication Vulnerability

Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

FreeType FreeType — FreeType Out-of-Bounds Write Vulnerability

Microsoft Windows — Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Microsoft Windows — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Scripting Engine Type Confusion Vulnerability

Srimax Output Messenger — Srimax Output Messenger Directory Traversal Vulnerability

Ivanti EPMM — Remote Code Execution via Spring EL Injection in Feature Usage API, Chained with Auth Bypass for Pre-Auth RCE

Commvault Web Server — Commvault Web Server Unspecified Vulnerability

Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

reviewdog action-setup GitHub Action — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

tj-actions changed-files GitHub Action — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

Google Chromium Mojo — Google Chromium Mojo Sandbox Escape Vulnerability

VMware ESXi — VMware ESXi Arbitrary Write Vulnerability

Fortinet FortiOS and FortiProxy — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Microsoft Windows — Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Microsoft Windows — Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

VMware ESXi, Workstation, and Fusion — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

Microsoft Windows — Microsoft Windows Win32k Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Trimble Cityworks — Trimble Cityworks Deserialization Vulnerability

Microsoft Power Pages — Microsoft Power Pages Improper Access Control Vulnerability

Craft CMS Craft CMS — Craft CMS Code Injection Vulnerability

Microsoft Windows — Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Microsoft Windows — Microsoft Windows Storage Link Following Vulnerability

7-Zip 7-Zip — 7-Zip Mark of the Web Bypass Vulnerability

Microsoft Windows — Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Microsoft Windows — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability