| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability |
SonicWall · SMA100 Appliances | May 1, 2025 | May 22, 2025 | 76.2% | — |
| CVE-2024-38475
Apache HTTP Server Improper Escaping of Output Vulnerability |
Apache · HTTP Server | May 1, 2025 | May 22, 2025 | 100.0% | — |
| CVE-2025-31324 Ransomware
SAP NetWeaver Unrestricted File Upload Vulnerability |
SAP · NetWeaver | Apr 29, 2025 | May 20, 2025 | 99.5% | — |
| CVE-2025-1976
Broadcom Brocade Fabric OS Code Injection Vulnerability |
Broadcom · Brocade Fabric OS | Apr 28, 2025 | May 19, 2025 | 0.7% | — |
| CVE-2025-3928
Commvault Web Server Unspecified Vulnerability |
Commvault · Web Server | Apr 28, 2025 | May 19, 2025 | 2.5% | — |
| CVE-2025-42599
Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability |
Qualitia · Active! Mail | Apr 28, 2025 | May 19, 2025 | 3.4% | — |
| CVE-2025-24054
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability |
Microsoft · Windows | Apr 17, 2025 | May 8, 2025 | 62.3% | — |
| CVE-2025-31200
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Apr 17, 2025 | May 8, 2025 | 20.9% | — |
| CVE-2025-31201
Apple Multiple Products Arbitrary Read and Write Vulnerability |
Apple · Multiple Products | Apr 17, 2025 | May 8, 2025 | 14.0% | — |
| CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability |
SonicWall · SMA100 Appliances | Apr 16, 2025 | May 7, 2025 | 4.4% | — |
| CVE-2024-53150
Linux Kernel Out-of-Bounds Read Vulnerability |
Linux · Kernel | Apr 9, 2025 | Apr 30, 2025 | 1.4% | — |
| CVE-2024-53197
Linux Kernel Out-of-Bounds Access Vulnerability |
Linux · Kernel | Apr 9, 2025 | Apr 30, 2025 | 4.1% | — |
| CVE-2025-29824 Ransomware
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerabi… |
Microsoft · Windows | Apr 8, 2025 | Apr 29, 2025 | 19.3% | — |
| CVE-2025-30406
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerabil… |
Gladinet · CentreStack | Apr 8, 2025 | Apr 29, 2025 | 94.7% | — |
| CVE-2025-31161 Ransomware
CrushFTP Authentication Bypass Vulnerability |
CrushFTP · CrushFTP | Apr 7, 2025 | Apr 28, 2025 | 100.0% | — |
| CVE-2025-22457 Ransomware
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overf… |
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Apr 4, 2025 | Apr 11, 2025 | 100.0% | — |
| CVE-2025-24813
Apache Tomcat Path Equivalence Vulnerability |
Apache · Tomcat | Apr 1, 2025 | Apr 22, 2025 | 99.9% | — |
| CVE-2024-20439
Cisco Smart Licensing Utility Static Credential Vulnerability |
Cisco · Smart Licensing Utility | Mar 31, 2025 | Apr 21, 2025 | 97.1% | — |
| CVE-2025-2783
Google Chromium Mojo Sandbox Escape Vulnerability |
Google · Chromium Mojo | Mar 27, 2025 | Apr 17, 2025 | 9.2% | — |
| CVE-2019-9874
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability |
Sitecore · CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | 83.7% | — |
| CVE-2019-9875
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability |
Sitecore · CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | 25.4% | — |
| CVE-2025-30154
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability |
reviewdog · action-setup GitHub Action | Mar 24, 2025 | Apr 14, 2025 | 2.5% | — |
| CVE-2017-12637
SAP NetWeaver Directory Traversal Vulnerability |
SAP · NetWeaver | Mar 19, 2025 | Apr 9, 2025 | 95.1% | — |
| CVE-2024-48248
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability |
NAKIVO · Backup and Replication | Mar 19, 2025 | Apr 9, 2025 | 94.4% | — |
| CVE-2025-1316
Edimax IC-7100 IP Camera OS Command Injection Vulnerability |
Edimax · IC-7100 IP Camera | Mar 19, 2025 | Apr 9, 2025 | 74.5% | — |
| CVE-2025-24472 Ransomware
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
Fortinet · FortiOS and FortiProxy | Mar 18, 2025 | Apr 8, 2025 | 7.2% | — |
| CVE-2025-30066
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability |
tj-actions · changed-files GitHub Action | Mar 18, 2025 | Apr 8, 2025 | 72.1% | — |
| CVE-2025-21590
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability |
Juniper · Junos OS | Mar 13, 2025 | Apr 3, 2025 | 1.7% | — |
| CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability |
Apple · Multiple Products | Mar 13, 2025 | Apr 3, 2025 | 3.8% | — |
| CVE-2025-24983
Microsoft Windows Win32k Use-After-Free Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 1.9% | — |
| CVE-2025-24984
Microsoft Windows NTFS Information Disclosure Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 2.0% | — |
| CVE-2025-24985
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 3.9% | — |
| CVE-2025-24991
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 2.0% | — |
| CVE-2025-24993
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 2.2% | — |
| CVE-2025-26633 Ransomware
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability |
Microsoft · Windows | Mar 11, 2025 | Apr 1, 2025 | 30.4% | — |
| CVE-2024-13159
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
Ivanti · Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | 100.0% | — |
| CVE-2024-13160
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
Ivanti · Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | 91.0% | — |
| CVE-2024-13161
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
Ivanti · Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | 89.8% | — |
| CVE-2024-57968
Advantive VeraCore Unrestricted File Upload Vulnerability |
Advantive · VeraCore | Mar 10, 2025 | Mar 31, 2025 | 32.1% | — |
| CVE-2025-25181
Advantive VeraCore SQL Injection Vulnerability |
Advantive · VeraCore | Mar 10, 2025 | Mar 31, 2025 | 54.8% | — |
| CVE-2024-50302
Linux Kernel Use of Uninitialized Resource Vulnerability |
Linux · Kernel | Mar 4, 2025 | Mar 25, 2025 | 0.8% | — |
| CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability |
VMware · ESXi and Workstation | Mar 4, 2025 | Mar 25, 2025 | 1.6% | — |
| CVE-2025-22225 Ransomware
VMware ESXi Arbitrary Write Vulnerability |
VMware · ESXi | Mar 4, 2025 | Mar 25, 2025 | 1.0% | — |
| CVE-2025-22226
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
VMware · ESXi, Workstation, and Fusion | Mar 4, 2025 | Mar 25, 2025 | 1.6% | — |
| CVE-2018-8639 Ransomware
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability |
Microsoft · Windows | Mar 3, 2025 | Mar 24, 2025 | 22.3% | — |
| CVE-2022-43769
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability |
Hitachi Vantara · Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | 97.7% | — |
| CVE-2022-43939
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability |
Hitachi Vantara · Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | 92.3% | — |
| CVE-2023-20118
Cisco Small Business RV Series Routers Command Injection Vulnerability |
Cisco · Small Business RV Series Routers | Mar 3, 2025 | Mar 24, 2025 | 54.1% | — |
| CVE-2024-4885
Progress WhatsUp Gold Path Traversal Vulnerability |
Progress · WhatsUp Gold | Mar 3, 2025 | Mar 24, 2025 | 99.3% | — |
| CVE-2023-34192
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabili… |
Synacor · Zimbra Collaboration Suite (ZCS) | Feb 25, 2025 | Mar 18, 2025 | 77.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.