March 2025
Published in March 2025
- criticalexploitedCVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2017-12637
- criticalGitLab Patch Release: 17.10.1, 17.9.3, 17.8.6gitlab
- known exploitedpublic exploitCVE-2018-8639
- criticalGitLab Patch Release: 17.10.1, 17.9.3, 17.8.6gitlab
- known exploitedpublic exploitCVE-2019-9874
- criticalexploitedCVE-2019-9875: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerabilitycisa-kev
- known exploitedCVE-2019-9875
- criticalexploitedCVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2022-43769
- criticalDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004drupal
- known exploitedpublic exploitCVE-2022-43939
- unknownJenkins Security Advisory 2025-03-19jenkins
- known exploitedCVE-2023-20118
- criticalexploitedCVE-2025-1316: Edimax IC-7100 IP Camera OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-13159
- criticalexploitedCVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-13160
- criticalexploitedCVE-2025-30066: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-13161
- criticalexploitedCVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-20439
- criticalGitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7gitlab
- known exploitedpublic exploitCVE-2024-48248
- criticalGitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7gitlab
- known exploitedpublic exploitCVE-2024-4885
- unknownPre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466fortinet
- known exploitedCVE-2024-50302
- criticalexploitedCVE-2025-24984: Microsoft Windows NTFS Information Disclosure Vulnerabilitycisa-kev
- known exploitedCVE-2024-57968
- unknownJenkins Security Advisory 2025-03-05jenkins
- known exploitedCVE-2025-1316
- criticalexploitedCVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerabilitycisa-kev
- known exploitedCVE-2025-21590
- criticalexploitedCVE-2025-22225: VMware ESXi Arbitrary Write Vulnerabilitycisa-kev
- known exploitedCVE-2025-22224
- criticalexploitedCVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerabilitycisa-kev
- known exploitedCVE-2025-22225
- criticalexploitedCVE-2023-20118: Cisco Small Business RV Series Routers Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2025-22226
- criticalexploitedCVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24201
- criticalexploitedCVE-2018-8639: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24472
- known exploitedCVE-2025-24983
- known exploitedCVE-2025-24984
- known exploitedpublic exploitCVE-2025-24985
- known exploitedCVE-2025-24991
- known exploitedCVE-2025-24993
- known exploitedCVE-2025-25181
- known exploitedpublic exploitCVE-2025-26633
- known exploitedpublic exploitCVE-2025-2783
- known exploitedpublic exploitCVE-2025-30066
- known exploitedCVE-2025-30154