Added to KEV in 2025-10

CVE-2025-41244 – Broadcom VMware Aria Operations and VMware Tools (added 2025-10-30)
CVE-2025-24893 – XWiki Platform (added 2025-10-30)
CVE-2025-6205 – Dassault Systèmes DELMIA Apriso (added 2025-10-28)
CVE-2025-6204 – Dassault Systèmes DELMIA Apriso (added 2025-10-28)
CVE-2025-59287 – Microsoft Windows (added 2025-10-24)
CVE-2025-54236 – Adobe Commerce and Magento (added 2025-10-24)
CVE-2025-61932 – Motex LANSCOPE Endpoint Manager (added 2025-10-22)
CVE-2025-61884 – Oracle E-Business Suite (added 2025-10-20)
CVE-2025-33073 – Microsoft Windows (added 2025-10-20)
CVE-2025-2747 – Kentico Xperience CMS (added 2025-10-20)
CVE-2025-2746 – Kentico Xperience CMS (added 2025-10-20)
CVE-2022-48503 – Apple Multiple Products (added 2025-10-20)
CVE-2025-54253 – Adobe Experience Manager (AEM) Forms (added 2025-10-15)
CVE-2025-59230 – Microsoft Windows (added 2025-10-14)
CVE-2025-47827 – IGEL IGEL OS (added 2025-10-14)
CVE-2025-24990 – Microsoft Windows (added 2025-10-14)
CVE-2016-7836 – SKYSEA Client View (added 2025-10-14)
CVE-2021-43798 – Grafana Labs Grafana (added 2025-10-09)
CVE-2025-27915 – Synacor Zimbra Collaboration Suite (ZCS) (added 2025-10-07)
CVE-2025-61882 – Oracle E-Business Suite (added 2025-10-06)
CVE-2021-43226 – Microsoft Windows (added 2025-10-06)
CVE-2021-22555 – Linux Kernel (added 2025-10-06)
CVE-2013-3918 – Microsoft Windows (added 2025-10-06)
CVE-2011-3402 – Microsoft Windows (added 2025-10-06)
CVE-2010-3962 – Microsoft Internet Explorer (added 2025-10-06)
CVE-2010-3765 – Mozilla Multiple Products (added 2025-10-06)
CVE-2025-4008 – Smartbedded Meteobridge (added 2025-10-02)
CVE-2025-21043 – Samsung Mobile Devices (added 2025-10-02)
CVE-2017-1000353 – Jenkins Jenkins (added 2025-10-02)
CVE-2015-7755 – Juniper ScreenOS (added 2025-10-02)
CVE-2014-6278 – GNU GNU Bash (added 2025-10-02)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).