December 2025
Published in December 2025
- criticalexploitedCVE-2025-14847: MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerabilitycisa-kev
- known exploitedCVE-2018-4063
- criticalexploitedCVE-2025-14733: WatchGuard Firebox Out of Bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-26828
- criticalexploited2025-042: Critical Vulnerability in Cisco Secure Email and Web Managercert-eu
- known exploitedCVE-2022-37055
- criticalexploitedCVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-52163
- criticalexploitedCVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-14174
- criticalexploitedCVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-14611
- criticalexploitedCVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-14733
- criticalexploitedCVE-2025-14611: Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-14847
- criticalexploitedCVE-2025-14174: Google Chromium Out of Bounds Memory Access Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-20393
- criticalexploitedCVE-2018-4063: Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-40602
- criticalexploitedCVE-2025-58360: OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-43529
- unknownJenkins Security Advisory 2025-12-10jenkins
- known exploitedCVE-2025-48572
- criticalGitLab Patch Release: 18.6.2, 18.5.4, 18.4.6gitlab
- known exploitedCVE-2025-48633
- criticalGitLab Patch Release: 18.6.2, 18.5.4, 18.4.6gitlab
- known exploitedpublic exploitCVE-2025-55182
- criticalexploitedCVE-2022-37055: D-Link Routers Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-58360
- criticalexploitedCVE-2025-55182: Meta React Server Components Remote Code Execution Vulnerabilitycisa-kev
- known exploitedCVE-2025-59374
- unknownexploited[Update] Vulnerability in React Server Components (December 5, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-59718
- critical2025-041: Critical Security Vulnerability in React Server Componentscert-eu
- known exploitedpublic exploitCVE-2025-6218
- known exploitedpublic exploitCVE-2025-62221
- known exploitedCVE-2025-66644