CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability Advantive VeraCore Versions & vendor guidance → |
Known exploitedCISA KEV | 5.8Medium |
| CVE-2025-24993Windows NTFS Remote Code Execution Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-24991Windows NTFS Information Disclosure Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2025-24990Windows Agere Modem Driver Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-24989Microsoft Power Pages Elevation of Privilege Vulnerability Microsoft Microsoft Power Pages Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2025-24985Windows Fast FAT File System Driver Remote Code Execution Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2025-24984Windows NTFS Information Disclosure Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 4.6Medium |
| CVE-2025-24983Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2025-24893Remote code execution as guest via SolrSearchMacros request in xwiki xwiki xwiki-platform Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2025-24813Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Apache Software Foundation Apache Tomcat Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS, Fortinet FortiProxy Reported fix guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2025-24201Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple Safari, Apple iOS and iPadOS, Apple iPadOS, Apple macOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-24200Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple iOS and iPadOS, Apple iPadOS Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2025-24085Apple Multiple Products Use-After-Free Vulnerability Apple iOS and iPadOS, Apple iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2025-24054NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2025-24016Remote code execution in Wazuh server wazuh wazuh Versions & vendor guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2025-23209Potential RCE with a compromised security key in craft/cms craftcms cms Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2025-23006SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall SMA1000 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Ivanti Policy Secure, Ivanti Neurons for ZTA gateways Versions & vendor guidance → |
Known exploitedCISA KEV | 9Critical |
| CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability n/a ESXi, n/a VMware Workstation, n/a VMware Fusion, n/a VMware Cloud Foundation, n/a VMware Telco Cloud Platform, n/a VMware Telco Cloud Infrastructure Versions & vendor guidance → |
Known exploitedCISA KEV | 7.1High |
| CVE-2025-22225VMware ESXi Arbitrary Write Vulnerability n/a VMware ESXi, n/a VMware Cloud Foundation, n/a VMware Telco Cloud Platform, n/a VMware Telco Cloud Infrastructure Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware ESXi, VMware Workstation, VMware VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2025-21590Junos OS: An local attacker with shell access can execute arbitrary code Juniper Networks Junos OS Reported fix guidance → |
Known exploitedCISA KEV | 6.7Medium |
| CVE-2025-21480Incorrect Authorization in Graphics Windows Qualcomm, Inc. Snapdragon Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2025-21479Incorrect Authorization in Graphics Qualcomm, Inc. Snapdragon Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.