October 2025
Published in October 2025
- criticalexploitedCVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnera…cisa-kev
- known exploitedpublic exploitCVE-2010-3765
- unknownJenkins Security Advisory 2025-10-29jenkins
- known exploitedpublic exploitCVE-2010-3962
- criticalGitLab Patch Release: 18.5.1, 18.4.3, 18.3.5gitlab
- known exploitedpublic exploitCVE-2011-3402
- criticalGitLab Patch Release: 18.5.1, 18.4.3, 18.3.5gitlab
- known exploitedpublic exploitCVE-2013-3918
- criticalexploitedCVE-2025-61932: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vul…cisa-kev
- known exploitedpublic exploitCVE-2014-6278
- criticalexploitedCVE-2025-33073: Microsoft Windows SMB Client Improper Access Control Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2015-7755
- criticalexploitedCVE-2022-48503: Apple Multiple Products Unspecified Vulnerabilitycisa-kev
- known exploitedCVE-2016-7836
- unknownInsertion of Sensitive 2FA Information in logs and debug commandfortinet
- known exploitedpublic exploitCVE-2017-1000353
- criticalexploitedCVE-2016-7836: SKYSEA Client View Improper Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-22555
- criticalexploitedCVE-2025-24990: Microsoft Windows Untrusted Pointer Dereference Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-43226
- criticalexploitedCVE-2025-47827: IGEL OS Use of a Key Past its Expiration Date Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-43798
- criticalGitLab Patch Release: 18.4.2, 18.3.4, 18.2.8gitlab
- known exploitedCVE-2022-48503
- criticalGitLab Patch Release: 18.4.2, 18.3.4, 18.2.8gitlab
- known exploitedCVE-2025-21043
- criticalexploitedCVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24893
- criticalexploitedCVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24990
- criticalexploitedCVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-2746
- criticalexploitedCVE-2025-61882: Oracle E-Business Suite Unspecified Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-2747
- criticalexploitedCVE-2010-3962: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-27915
- criticalexploitedCVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-33073
- criticalexploitedCVE-2017-1000353: Jenkins Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-4008
- criticalexploitedCVE-2025-4008: Smartbedded Meteobridge Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-41244
- known exploitedpublic exploitCVE-2025-47827
- known exploitedpublic exploitCVE-2025-54236
- known exploitedpublic exploitCVE-2025-54253
- known exploitedCVE-2025-59230
- known exploitedpublic exploitCVE-2025-59287
- known exploitedpublic exploitCVE-2025-61882
- known exploitedpublic exploitCVE-2025-61884
- known exploitedCVE-2025-61932
- known exploitedpublic exploitCVE-2025-6204
- known exploitedpublic exploitCVE-2025-6205