| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2021-43226 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Oct 6, 2025 | Oct 27, 2025 | 3.3% | — |
| CVE-2025-61882 Ransomware
Oracle E-Business Suite Unspecified Vulnerability |
Oracle · E-Business Suite | Oct 6, 2025 | Oct 27, 2025 | 99.7% | — |
| CVE-2014-6278
GNU Bash OS Command Injection Vulnerability |
GNU · GNU Bash | Oct 2, 2025 | Oct 23, 2025 | 99.7% | — |
| CVE-2015-7755
Juniper ScreenOS Improper Authentication Vulnerability |
Juniper · ScreenOS | Oct 2, 2025 | Oct 23, 2025 | 61.4% | — |
| CVE-2017-1000353
Jenkins Remote Code Execution Vulnerability |
Jenkins · Jenkins | Oct 2, 2025 | Oct 23, 2025 | 99.7% | — |
| CVE-2025-21043
Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
Samsung · Mobile Devices | Oct 2, 2025 | Oct 23, 2025 | 2.2% | — |
| CVE-2025-4008
Smartbedded Meteobridge Command Injection Vulnerability |
Smartbedded · Meteobridge | Oct 2, 2025 | Oct 23, 2025 | 93.4% | — |
| CVE-2021-21311
Adminer Server-Side Request Forgery Vulnerability |
Adminer · Adminer | Sep 29, 2025 | Oct 20, 2025 | 98.5% | — |
| CVE-2025-10035 Ransomware
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability |
Fortra · GoAnywhere MFT | Sep 29, 2025 | Oct 20, 2025 | 99.8% | — |
| CVE-2025-20352
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution … |
Cisco · IOS and IOS XE | Sep 29, 2025 | Oct 20, 2025 | 40.6% | — |
| CVE-2025-32463
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
Sudo · Sudo | Sep 29, 2025 | Oct 20, 2025 | 56.3% | — |
| CVE-2025-59689
Libraesva Email Security Gateway Command Injection Vulnerability |
Libraesva · Email Security Gateway | Sep 29, 2025 | Oct 20, 2025 | 2.0% | — |
| CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Thr… |
Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | 72.0% | — |
| CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Thr… |
Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 25, 2025 | Sep 26, 2025 | 86.7% | — |
| CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Sep 23, 2025 | Oct 14, 2025 | 9.0% | — |
| CVE-2025-5086
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability |
Dassault Systèmes · DELMIA Apriso | Sep 11, 2025 | Oct 2, 2025 | 97.2% | — |
| CVE-2025-38352
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability |
Linux · Kernel | Sep 4, 2025 | Sep 25, 2025 | 1.4% | — |
| CVE-2025-48543
Android Runtime Use-After-Free Vulnerability |
Android · Runtime | Sep 4, 2025 | Sep 25, 2025 | 0.7% | — |
| CVE-2025-53690
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability |
Sitecore · Multiple Products | Sep 4, 2025 | Sep 25, 2025 | 60.7% | — |
| CVE-2023-50224
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability |
TP-Link · TL-WR841N | Sep 3, 2025 | Sep 24, 2025 | 20.0% | — |
| CVE-2025-9377
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability |
TP-Link · Multiple Routers | Sep 3, 2025 | Sep 24, 2025 | 41.3% | — |
| CVE-2020-24363
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability |
TP-Link · TL-WA855RE | Sep 2, 2025 | Sep 23, 2025 | 22.2% | — |
| CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability |
Meta Platforms · WhatsApp | Sep 2, 2025 | Sep 23, 2025 | 13.5% | — |
| CVE-2025-57819
Sangoma FreePBX Authentication Bypass Vulnerability |
Sangoma · FreePBX | Aug 29, 2025 | Sep 19, 2025 | 95.2% | — |
| CVE-2025-7775
Citrix NetScaler Memory Overflow Vulnerability |
Citrix · NetScaler | Aug 26, 2025 | Aug 28, 2025 | 20.7% | — |
| CVE-2024-8068
Citrix Session Recording Improper Privilege Management Vulnerability |
Citrix · Session Recording | Aug 25, 2025 | Sep 15, 2025 | 3.5% | — |
| CVE-2024-8069
Citrix Session Recording Deserialization of Untrusted Data Vulnerability |
Citrix · Session Recording | Aug 25, 2025 | Sep 15, 2025 | 18.2% | — |
| CVE-2025-48384
Git Link Following Vulnerability |
Git · Git | Aug 25, 2025 | Sep 15, 2025 | 4.5% | — |
| CVE-2025-43300
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
Apple · iOS, iPadOS, and macOS | Aug 21, 2025 | Sep 11, 2025 | 63.2% | — |
| CVE-2025-54948
Trend Micro Apex One OS Command Injection Vulnerability |
Trend Micro · Apex One | Aug 18, 2025 | Sep 8, 2025 | 32.9% | — |
| CVE-2025-8875
N-able N-Central Insecure Deserialization Vulnerability |
N-able · N-Central | Aug 13, 2025 | Aug 20, 2025 | 2.3% | — |
| CVE-2025-8876
N-able N-Central Command Injection Vulnerability |
N-able · N-Central | Aug 13, 2025 | Aug 20, 2025 | 4.1% | — |
| CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability |
Microsoft · Office | Aug 12, 2025 | Sep 2, 2025 | 44.1% | — |
| CVE-2013-3893
Microsoft Internet Explorer Resource Management Errors Vulnerability |
Microsoft · Internet Explorer | Aug 12, 2025 | Sep 2, 2025 | 87.6% | — |
| CVE-2025-8088 Ransomware
RARLAB WinRAR Path Traversal Vulnerability |
RARLAB · WinRAR | Aug 12, 2025 | Sep 2, 2025 | 94.3% | 2 last Oct 19 |
| CVE-2020-25078
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability |
D-Link · DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | 97.5% | — |
| CVE-2020-25079
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability |
D-Link · DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | 54.0% | — |
| CVE-2022-40799
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability |
D-Link · DNR-322L | Aug 5, 2025 | Aug 26, 2025 | 33.7% | — |
| CVE-2023-2533
PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability |
PaperCut · NG/MF | Jul 28, 2025 | Aug 18, 2025 | 28.8% | — |
| CVE-2025-20281
Cisco Identity Services Engine Injection Vulnerability |
Cisco · Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | 97.6% | — |
| CVE-2025-20337
Cisco Identity Services Engine Injection Vulnerability |
Cisco · Identity Services Engine | Jul 28, 2025 | Aug 18, 2025 | 74.5% | — |
| CVE-2025-2775
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabil… |
SysAid · SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | 43.2% | — |
| CVE-2025-2776
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabil… |
SysAid · SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | 65.2% | — |
| CVE-2025-49704 Ransomware
Microsoft SharePoint Code Injection Vulnerability |
Microsoft · SharePoint | Jul 22, 2025 | Jul 23, 2025 | 100.0% | — |
| CVE-2025-49706 Ransomware
Microsoft SharePoint Improper Authentication Vulnerability |
Microsoft · SharePoint | Jul 22, 2025 | Jul 23, 2025 | 99.9% | — |
| CVE-2025-54309
CrushFTP Unprotected Alternate Channel Vulnerability |
CrushFTP · CrushFTP | Jul 22, 2025 | Aug 12, 2025 | 93.5% | — |
| CVE-2025-6558
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability |
Google · Chromium | Jul 22, 2025 | Aug 12, 2025 | 10.9% | — |
| CVE-2025-53770 Ransomware
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint | Jul 20, 2025 | Jul 21, 2025 | 100.0% | — |
| CVE-2025-25257
Fortinet FortiWeb SQL Injection Vulnerability |
Fortinet · FortiWeb | Jul 18, 2025 | Aug 8, 2025 | 99.9% | 1 last Oct 14 |
| CVE-2025-47812
Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerabi… |
Wing FTP Server · Wing FTP Server | Jul 14, 2025 | Aug 4, 2025 | 93.9% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.