| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2025-59374
ASUS Live Update Embedded Malicious Code Vulnerability |
ASUS · Live Update | Dec 17, 2025 | Jan 7, 2026 | 1.2% | — |
| CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vul… |
Fortinet · Multiple Products | Dec 16, 2025 | Dec 23, 2025 | 68.1% | — |
| CVE-2025-14611
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability |
Gladinet · CentreStack and Triofox | Dec 15, 2025 | Jan 5, 2026 | 54.5% | — |
| CVE-2025-43529
Apple Multiple Products Use-After-Free WebKit Vulnerability |
Apple · Multiple Products | Dec 15, 2025 | Jan 5, 2026 | 25.7% | — |
| CVE-2018-4063
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type V… |
Sierra Wireless · AirLink ALEOS | Dec 12, 2025 | Jan 2, 2026 | 27.3% | — |
| CVE-2025-14174
Google Chromium Out of Bounds Memory Access Vulnerability |
Google · Chromium | Dec 12, 2025 | Jan 2, 2026 | 43.3% | — |
| CVE-2025-58360
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerabi… |
OSGeo · GeoServer | Dec 11, 2025 | Jan 1, 2026 | 61.2% | — |
| CVE-2025-6218
RARLAB WinRAR Path Traversal Vulnerability |
RARLAB · WinRAR | Dec 9, 2025 | Dec 30, 2025 | 90.5% | — |
| CVE-2025-62221
Microsoft Windows Use After Free Vulnerability |
Microsoft · Windows | Dec 9, 2025 | Dec 30, 2025 | 2.5% | — |
| CVE-2022-37055
D-Link Routers Buffer Overflow Vulnerability |
D-Link · Routers | Dec 8, 2025 | Dec 29, 2025 | 55.5% | — |
| CVE-2025-66644
Array Networks ArrayOS AG OS Command Injection Vulnerability |
Array Networks · ArrayOS AG | Dec 8, 2025 | Dec 29, 2025 | 3.3% | — |
| CVE-2025-55182 Ransomware
Meta React Server Components Remote Code Execution Vulnerability |
Meta · React Server Components | Dec 5, 2025 | Dec 12, 2025 | 99.7% | — |
| CVE-2021-26828
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability |
OpenPLC · ScadaBR | Dec 3, 2025 | Dec 24, 2025 | 39.1% | — |
| CVE-2025-48572
Android Framework Privilege Escalation Vulnerability |
Android · Framework | Dec 2, 2025 | Dec 23, 2025 | 0.3% | — |
| CVE-2025-48633
Android Framework Information Disclosure Vulnerability |
Android · Framework | Dec 2, 2025 | Dec 23, 2025 | 0.3% | — |
| CVE-2021-26829
OpenPLC ScadaBR Cross-site Scripting Vulnerability |
OpenPLC · ScadaBR | Nov 28, 2025 | Dec 19, 2025 | 48.0% | — |
| CVE-2025-61757
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerabi… |
Oracle · Fusion Middleware | Nov 21, 2025 | Dec 12, 2025 | 88.6% | — |
| CVE-2025-13223
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 19, 2025 | Dec 10, 2025 | 4.9% | — |
| CVE-2025-58034
Fortinet FortiWeb OS Command Injection Vulnerability |
Fortinet · FortiWeb | Nov 18, 2025 | Nov 25, 2025 | 54.7% | — |
| CVE-2025-64446
Fortinet FortiWeb Path Traversal Vulnerability |
Fortinet · FortiWeb | Nov 14, 2025 | Nov 21, 2025 | 91.1% | — |
| CVE-2025-12480
Gladinet Triofox Improper Access Control Vulnerability |
Gladinet · Triofox | Nov 12, 2025 | Dec 3, 2025 | 95.7% | — |
| CVE-2025-62215
Microsoft Windows Race Condition Vulnerability |
Microsoft · Windows | Nov 12, 2025 | Dec 3, 2025 | 4.5% | — |
| CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability |
WatchGuard · Firebox | Nov 12, 2025 | Dec 3, 2025 | 92.2% | — |
| CVE-2025-21042
Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
Samsung · Mobile Devices | Nov 10, 2025 | Dec 1, 2025 | 35.7% | — |
| CVE-2025-11371
Gladinet CentreStack and Triofox Files or Directories Accessible to External Pa… |
Gladinet · CentreStack and Triofox | Nov 4, 2025 | Nov 25, 2025 | 92.1% | — |
| CVE-2025-48703
CWP Control Web Panel OS Command Injection Vulnerability |
CWP · Control Web Panel | Nov 4, 2025 | Nov 25, 2025 | 99.7% | — |
| CVE-2025-24893
XWiki Platform Eval Injection Vulnerability |
XWiki · Platform | Oct 30, 2025 | Nov 20, 2025 | 100.0% | — |
| CVE-2025-41244
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe … |
Broadcom · VMware Aria Operations and VMware Tools | Oct 30, 2025 | Nov 20, 2025 | 16.4% | — |
| CVE-2025-6204
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability |
Dassault Systèmes · DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | 76.8% | — |
| CVE-2025-6205
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability |
Dassault Systèmes · DELMIA Apriso | Oct 28, 2025 | Nov 18, 2025 | 67.2% | — |
| CVE-2025-54236
Adobe Commerce and Magento Improper Input Validation Vulnerability |
Adobe · Commerce and Magento | Oct 24, 2025 | Nov 14, 2025 | 95.5% | — |
| CVE-2025-59287
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Dat… |
Microsoft · Windows | Oct 24, 2025 | Nov 14, 2025 | 100.0% | — |
| CVE-2025-61932
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communicat… |
Motex · LANSCOPE Endpoint Manager | Oct 22, 2025 | Nov 12, 2025 | 2.8% | — |
| CVE-2022-48503
Apple Multiple Products Unspecified Vulnerability |
Apple · Multiple Products | Oct 20, 2025 | Nov 10, 2025 | 3.2% | — |
| CVE-2025-2746
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel … |
Kentico · Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | 74.1% | — |
| CVE-2025-2747
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel … |
Kentico · Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | 97.2% | — |
| CVE-2025-33073
Microsoft Windows SMB Client Improper Access Control Vulnerability |
Microsoft · Windows | Oct 20, 2025 | Nov 10, 2025 | 82.8% | — |
| CVE-2025-61884 Ransomware
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
Oracle · E-Business Suite | Oct 20, 2025 | Nov 10, 2025 | 95.9% | — |
| CVE-2025-54253
Adobe Experience Manager Forms Code Execution Vulnerability |
Adobe · Experience Manager (AEM) Forms | Oct 15, 2025 | Nov 5, 2025 | 80.8% | — |
| CVE-2016-7836
SKYSEA Client View Improper Authentication Vulnerability |
SKYSEA · Client View | Oct 14, 2025 | Nov 4, 2025 | 19.2% | — |
| CVE-2025-24990
Microsoft Windows Untrusted Pointer Dereference Vulnerability |
Microsoft · Windows | Oct 14, 2025 | Nov 4, 2025 | 7.9% | — |
| CVE-2025-47827
IGEL OS Use of a Key Past its Expiration Date Vulnerability |
IGEL · IGEL OS | Oct 14, 2025 | Nov 4, 2025 | 5.2% | — |
| CVE-2025-59230
Microsoft Windows Improper Access Control Vulnerability |
Microsoft · Windows | Oct 14, 2025 | Nov 4, 2025 | 2.7% | — |
| CVE-2021-43798
Grafana Path Traversal Vulnerability |
Grafana Labs · Grafana | Oct 9, 2025 | Oct 30, 2025 | 88.5% | — |
| CVE-2025-27915
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Oct 7, 2025 | Oct 28, 2025 | 4.1% | — |
| CVE-2010-3765
Mozilla Multiple Products Remote Code Execution Vulnerability |
Mozilla · Multiple Products | Oct 6, 2025 | Oct 27, 2025 | 83.2% | — |
| CVE-2010-3962
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Oct 6, 2025 | Oct 27, 2025 | 96.8% | — |
| CVE-2011-3402
Microsoft Windows Remote Code Execution Vulnerability |
Microsoft · Windows | Oct 6, 2025 | Oct 27, 2025 | 78.1% | — |
| CVE-2013-3918
Microsoft Windows Out-of-Bounds Write Vulnerability |
Microsoft · Windows | Oct 6, 2025 | Oct 27, 2025 | 73.7% | — |
| CVE-2021-22555
Linux Kernel Heap Out-of-Bounds Write Vulnerability |
Linux · Kernel | Oct 6, 2025 | Oct 27, 2025 | 78.7% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.