| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2024-49035
Microsoft Partner Center Improper Access Control Vulnerability |
Microsoft · Partner Center | Feb 25, 2025 | Mar 18, 2025 | 1.4% | — |
| CVE-2017-3066
Adobe ColdFusion Deserialization Vulnerability |
Adobe · ColdFusion | Feb 24, 2025 | Mar 17, 2025 | 90.6% | — |
| CVE-2024-20953
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability |
Oracle · Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | Mar 17, 2025 | 3.9% | — |
| CVE-2025-24989
Microsoft Power Pages Improper Access Control Vulnerability |
Microsoft · Power Pages | Feb 21, 2025 | Mar 14, 2025 | 1.6% | — |
| CVE-2025-0111
Palo Alto Networks PAN-OS File Read Vulnerability |
Palo Alto Networks · PAN-OS | Feb 20, 2025 | Mar 13, 2025 | 2.0% | — |
| CVE-2025-23209
Craft CMS Code Injection Vulnerability |
Craft CMS · Craft CMS | Feb 20, 2025 | Mar 13, 2025 | 21.6% | — |
| CVE-2024-53704 Ransomware
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability |
SonicWall · SonicOS | Feb 18, 2025 | Mar 11, 2025 | 95.3% | — |
| CVE-2025-0108
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability |
Palo Alto Networks · PAN-OS | Feb 18, 2025 | Mar 11, 2025 | 98.5% | — |
| CVE-2024-57727 Ransomware
SimpleHelp Path Traversal Vulnerability |
SimpleHelp · SimpleHelp | Feb 13, 2025 | Mar 6, 2025 | 96.8% | — |
| CVE-2024-41710
Mitel SIP Phones Argument Injection Vulnerability |
Mitel · SIP Phones | Feb 12, 2025 | Mar 5, 2025 | 41.6% | — |
| CVE-2025-24200
Apple iOS and iPadOS Incorrect Authorization Vulnerability |
Apple · iOS and iPadOS | Feb 12, 2025 | Mar 5, 2025 | 4.5% | — |
| CVE-2024-40890
Zyxel DSL CPE OS Command Injection Vulnerability |
Zyxel · DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | 20.6% | — |
| CVE-2024-40891
Zyxel DSL CPE OS Command Injection Vulnerability |
Zyxel · DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | 22.7% | — |
| CVE-2025-21391
Microsoft Windows Storage Link Following Vulnerability |
Microsoft · Windows | Feb 11, 2025 | Mar 4, 2025 | 2.3% | — |
| CVE-2025-21418
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overf… |
Microsoft · Windows | Feb 11, 2025 | Mar 4, 2025 | 2.1% | — |
| CVE-2025-0994
Trimble Cityworks Deserialization Vulnerability |
Trimble · Cityworks | Feb 7, 2025 | Feb 28, 2025 | 31.3% | — |
| CVE-2020-15069
Sophos XG Firewall Buffer Overflow Vulnerability |
Sophos · XG Firewall | Feb 6, 2025 | Feb 27, 2025 | 10.7% | — |
| CVE-2020-29574 Ransomware
CyberoamOS (CROS) SQL Injection Vulnerability |
Sophos · CyberoamOS | Feb 6, 2025 | Feb 27, 2025 | 4.7% | — |
| CVE-2022-23748
Dante Discovery Process Control Vulnerability |
Audinate · Dante Discovery | Feb 6, 2025 | Feb 27, 2025 | 8.3% | — |
| CVE-2024-21413
Microsoft Outlook Improper Input Validation Vulnerability |
Microsoft · Office Outlook | Feb 6, 2025 | Feb 27, 2025 | 94.7% | — |
| CVE-2025-0411
7-Zip Mark of the Web Bypass Vulnerability |
7-Zip · 7-Zip | Feb 6, 2025 | Feb 27, 2025 | 47.6% | — |
| CVE-2024-53104
Linux Kernel Out-of-Bounds Write Vulnerability |
Linux · Kernel | Feb 5, 2025 | Feb 26, 2025 | 3.4% | — |
| CVE-2018-19410
Paessler PRTG Network Monitor Local File Inclusion Vulnerability |
Paessler · PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | 97.9% | — |
| CVE-2018-9276
Paessler PRTG Network Monitor OS Command Injection Vulnerability |
Paessler · PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | 86.9% | — |
| CVE-2024-29059
Microsoft .NET Framework Information Disclosure Vulnerability |
Microsoft · .NET Framework | Feb 4, 2025 | Feb 25, 2025 | 98.6% | — |
| CVE-2024-45195
Apache OFBiz Forced Browsing Vulnerability |
Apache · OFBiz | Feb 4, 2025 | Feb 25, 2025 | 100.0% | — |
| CVE-2025-24085
Apple Multiple Products Use-After-Free Vulnerability |
Apple · Multiple Products | Jan 29, 2025 | Feb 19, 2025 | 17.4% | — |
| CVE-2025-23006 Ransomware
SonicWall SMA1000 Appliances Deserialization Vulnerability |
SonicWall · SMA1000 Appliances | Jan 24, 2025 | Feb 14, 2025 | 26.6% | — |
| CVE-2020-11023
JQuery Cross-Site Scripting (XSS) Vulnerability |
JQuery · JQuery | Jan 23, 2025 | Feb 13, 2025 | 84.9% | — |
| CVE-2024-50603
Aviatrix Controllers OS Command Injection Vulnerability |
Aviatrix · Controllers | Jan 16, 2025 | Feb 6, 2025 | 98.5% | — |
| CVE-2024-55591 Ransomware
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
Fortinet · FortiOS and FortiProxy | Jan 14, 2025 | Jan 21, 2025 | 94.3% | — |
| CVE-2025-21333
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow … |
Microsoft · Windows | Jan 14, 2025 | Feb 4, 2025 | 10.1% | — |
| CVE-2025-21334
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability |
Microsoft · Windows | Jan 14, 2025 | Feb 4, 2025 | 1.6% | — |
| CVE-2025-21335
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability |
Microsoft · Windows | Jan 14, 2025 | Feb 4, 2025 | 1.4% | — |
| CVE-2023-48365 Ransomware
Qlik Sense HTTP Tunneling Vulnerability |
Qlik · Sense | Jan 13, 2025 | Feb 3, 2025 | 47.7% | — |
| CVE-2024-12686
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command I… |
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | Jan 13, 2025 | Feb 3, 2025 | 32.6% | — |
| CVE-2025-0282 Ransomware
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overf… |
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Jan 8, 2025 | Jan 15, 2025 | 100.0% | — |
| CVE-2020-2883
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Jan 7, 2025 | Jan 28, 2025 | 94.6% | — |
| CVE-2024-41713 Ransomware
Mitel MiCollab Path Traversal Vulnerability |
Mitel · MiCollab | Jan 7, 2025 | Jan 28, 2025 | 97.2% | — |
| CVE-2024-55550 Ransomware
Mitel MiCollab Path Traversal Vulnerability |
Mitel · MiCollab | Jan 7, 2025 | Jan 28, 2025 | 38.2% | — |
| CVE-2024-3393
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability |
Palo Alto Networks · PAN-OS | Dec 30, 2024 | Jan 20, 2025 | 30.2% | — |
| CVE-2021-44207
Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability |
Acclaim Systems · USAHERDS | Dec 23, 2024 | Jan 13, 2025 | 17.4% | — |
| CVE-2024-12356
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Inje… |
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | Dec 19, 2024 | Dec 27, 2024 | 87.4% | — |
| CVE-2018-14933
NUUO NVRmini Devices OS Command Injection Vulnerability |
NUUO · NVRmini Devices | Dec 18, 2024 | Jan 8, 2025 | 94.8% | — |
| CVE-2019-11001
Reolink Multiple IP Cameras OS Command Injection Vulnerability |
Reolink · Multiple IP Cameras | Dec 18, 2024 | Jan 8, 2025 | 37.5% | — |
| CVE-2021-40407
Reolink RLC-410W IP Camera OS Command Injection Vulnerability |
Reolink · RLC-410W IP Camera | Dec 18, 2024 | Jan 8, 2025 | 47.6% | — |
| CVE-2022-23227
NUUO NVRmini2 Devices Missing Authentication Vulnerability |
NUUO · NVRmini2 Devices | Dec 18, 2024 | Jan 8, 2025 | 48.5% | — |
| CVE-2024-55956 Ransomware
Cleo Multiple Products Unauthenticated File Upload Vulnerability |
Cleo · Multiple Products | Dec 17, 2024 | Jan 7, 2025 | 94.0% | — |
| CVE-2024-20767
Adobe ColdFusion Improper Access Control Vulnerability |
Adobe · ColdFusion | Dec 16, 2024 | Jan 6, 2025 | 98.5% | — |
| CVE-2024-35250
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerabilit… |
Microsoft · Windows | Dec 16, 2024 | Jan 6, 2025 | 25.2% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.