Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

568 changes · newest first · grouped by dayCSV JSON RSS

Counted changes, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.	Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Tue 1 Jul 2025· 1 change
2025-07-01	Added to CISA KEV	CVE-2025-6543	CitrixNetScaler ADC and Gateway CISA KEV	fix due 2025-07-21 · listed 2025-06-30	Duration unknown
Wed 25 Jun 2025· 3 changes
2025-06-25	Added to CISA KEV	CVE-2019-6693	FortinetFortiOS CISA KEV	fix due 2025-07-16	Duration unknown
2025-06-25	Added to CISA KEV	CVE-2024-0769	D-LinkDIR-859 Router CISA KEV	fix due 2025-07-16	Duration unknown
2025-06-25	Added to CISA KEV	CVE-2024-54085	AMIMegaRAC SPx CISA KEV	fix due 2025-07-16	Duration unknown
Tue 17 Jun 2025· 1 change
2025-06-17	Added to CISA KEV	CVE-2023-0386	LinuxKernel CISA KEV	fix due 2025-07-08	Duration unknown
Mon 16 Jun 2025· 2 changes
2025-06-16	Added to CISA KEV	CVE-2023-33538	TP-LinkMultiple Routers CISA KEV	fix due 2025-07-07	Duration unknown
2025-06-16	Added to CISA KEV	CVE-2025-43200	AppleMultiple Products CISA KEV	fix due 2025-07-07	Duration unknown
Tue 10 Jun 2025· 2 changes
2025-06-10	Added to CISA KEV	CVE-2025-33053	Web Distributed Authoring and VersioningWeb Distributed Authoring and Versioning (WebDAV) CISA KEV	fix due 2025-07-01	Duration unknown
2025-06-10	Added to CISA KEV	CVE-2025-24016	WazuhWazuh Server CISA KEV	fix due 2025-07-01	Duration unknown
Mon 9 Jun 2025· 20 changes
2025-06-09	Added to CISA KEV	CVE-2024-42009	RoundcubeWebmail CISA KEV	fix due 2025-06-30	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-32433	ErlangErlang/OTP CISA KEV	fix due 2025-06-30	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-5419	GoogleChromium V8 CISA KEV	fix due 2025-06-26 · listed 2025-06-05	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-21479	QualcommMultiple Chipsets CISA KEV	fix due 2025-06-24 · listed 2025-06-03	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-21480	QualcommMultiple Chipsets CISA KEV	fix due 2025-06-24 · listed 2025-06-03	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-27038	QualcommMultiple Chipsets CISA KEV	fix due 2025-06-24 · listed 2025-06-03	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2021-32030	ASUSRouters CISA KEV	fix due 2025-06-23 · listed 2025-06-02	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-3935	ConnectWiseScreenConnect CISA KEV	fix due 2025-06-23 · listed 2025-06-02	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2025-35939	Craft CMSCraft CMS CISA KEV	fix due 2025-06-23 · listed 2025-06-02	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2024-56145	Craft CMSCraft CMS CISA KEV	fix due 2025-06-23 · listed 2025-06-02	Duration unknown
2025-06-09	Added to CISA KEV	CVE-2023-39780	ASUSRT-AX55 Routers CISA KEV	fix due 2025-06-23 · listed 2025-06-02	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2024-57727	SimpleHelp SimpleHelp CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2023-43208	NextGen HealthcareMirth Connect CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2021-44529	IvantiEndpoint Manager Cloud Service Appliance (EPM CSA) CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2024-21762	FortinetFortiOS CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2022-30333	RARLABUnRAR CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2022-27924	SynacorZimbra Collaboration Suite (ZCS) CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2012-1710	OracleFusion Middleware CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Ransomware use confirmed	CVE-2012-4681	OracleJava SE CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-06-09	Removed from CISA KEV	CVE-2025-4664	GoogleChromium CISA KEV	Previously listed from 2025-05-15	Time to revision 25 days
Thu 22 May 2025· 1 change
2025-05-22	Added to CISA KEV	CVE-2025-4632	SamsungMagicINFO 9 Server CISA KEV	fix due 2025-06-12	Duration unknown
Mon 19 May 2025· 6 changes
2025-05-19	Added to CISA KEV	CVE-2023-38950	ZKTecoBioTime CISA KEV	fix due 2025-06-09	Duration unknown
2025-05-19	Added to CISA KEV	CVE-2024-27443	SynacorZimbra Collaboration Suite (ZCS) CISA KEV	fix due 2025-06-09	Duration unknown
2025-05-19	Added to CISA KEV	CVE-2025-27920	SrimaxOutput Messenger CISA KEV	fix due 2025-06-09	Duration unknown
2025-05-19	Added to CISA KEV	CVE-2024-11182	MDaemonEmail Server CISA KEV	fix due 2025-06-09	Duration unknown
2025-05-19	Added to CISA KEV	CVE-2025-4428	IvantiEndpoint Manager Mobile (EPMM) CISA KEV	fix due 2025-06-09	Duration unknown
2025-05-19	Added to CISA KEV	CVE-2025-4427	IvantiEndpoint Manager Mobile (EPMM) CISA KEV	fix due 2025-06-09	Duration unknown
Thu 15 May 2025· 4 changes
2025-05-15	Added to CISA KEV	CVE-2025-42999	SAPNetWeaver CISA KEV	fix due 2025-06-05	Duration unknown
2025-05-15	Added to CISA KEV	CVE-2024-12987	DrayTekVigor Routers CISA KEV	fix due 2025-06-05	Duration unknown
2025-05-15	Added to CISA KEV	CVE-2025-4664	GoogleChromium CISA KEV	fix due 2025-06-05	Duration unknown
2025-05-15	Ransomware use confirmed	CVE-2025-31324	SAPNetWeaver CISA KEV	stated at publication Unknown, now states Known	Time to revision 16 days
Wed 14 May 2025· 1 change
2025-05-14	Added to CISA KEV	CVE-2025-32756	FortinetMultiple Products CISA KEV	fix due 2025-06-04	Duration unknown
Tue 13 May 2025· 8 changes
2025-05-13	Added to CISA KEV	CVE-2025-32709	MicrosoftWindows CISA KEV	fix due 2025-06-03	Duration unknown
2025-05-13	Added to CISA KEV	CVE-2025-30397	MicrosoftWindows CISA KEV	fix due 2025-06-03	Duration unknown
2025-05-13	Added to CISA KEV	CVE-2025-32706	MicrosoftWindows CISA KEV	fix due 2025-06-03	Duration unknown
2025-05-13	Added to CISA KEV	CVE-2025-32701	MicrosoftWindows CISA KEV	fix due 2025-06-03	Duration unknown
2025-05-13	Added to CISA KEV	CVE-2025-30400	MicrosoftWindows CISA KEV	fix due 2025-06-03	Duration unknown
2025-05-13	Ransomware use confirmed	CVE-2022-2294	WebRTCWebRTC CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-13	Ransomware use confirmed	CVE-2022-21999	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-13	Ransomware use confirmed	CVE-2021-43890	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
Mon 12 May 2025· 15 changes
2025-05-12	Added to CISA KEV	CVE-2025-47729	TeleMessageTM SGNL CISA KEV	fix due 2025-06-02	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2025-22457	IvantiConnect Secure, Policy Secure, and ZTA Gateways CISA KEV	stated at publication Unknown, now states Known	Time to revision 38 days
2025-05-12	Ransomware use confirmed	CVE-2025-23006	SonicWallSMA1000 Appliances CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2025-0282	IvantiConnect Secure, Policy Secure, and ZTA Gateways CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2024-55550	MitelMiCollab CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2024-41713	MitelMiCollab CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2024-0012	Palo Alto NetworksPAN-OS CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2017-6884	ZyxelEMG2926 Routers CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2022-41091	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2022-30190	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2015-7645	AdobeFlash Player CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2008-2992	AdobeAcrobat and Reader CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2019-11580	AtlassianCrowd and Crowd Data Center CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2021-22205	GitLabCommunity and Enterprise Editions CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-05-12	Ransomware use confirmed	CVE-2014-1812	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
Wed 7 May 2025· 2 changes
2025-05-07	Added to CISA KEV	CVE-2024-11120	GeoVisionMultiple Devices CISA KEV	fix due 2025-05-28	Duration unknown
2025-05-07	Added to CISA KEV	CVE-2024-6047	GeoVisionMultiple Devices CISA KEV	fix due 2025-05-28	Duration unknown
Tue 6 May 2025· 1 change
2025-05-06	Added to CISA KEV	CVE-2025-27363	FreeTypeFreeType CISA KEV	fix due 2025-05-27	Duration unknown
Mon 5 May 2025· 1 change
2025-05-05	Added to CISA KEV	CVE-2025-3248	LangflowLangflow CISA KEV	fix due 2025-05-26	Duration unknown
Fri 2 May 2025· 4 changes
2025-05-02	Added to CISA KEV	CVE-2025-34028	CommvaultCommand Center CISA KEV	fix due 2025-05-23	Duration unknown
2025-05-02	Added to CISA KEV	CVE-2024-58136	YiiframeworkYii CISA KEV	fix due 2025-05-23	Duration unknown
2025-05-02	Added to CISA KEV	CVE-2024-38475	ApacheHTTP Server CISA KEV	fix due 2025-05-22 · listed 2025-05-01	Duration unknown
2025-05-02	Added to CISA KEV	CVE-2023-44221	SonicWallSMA100 Appliances CISA KEV	fix due 2025-05-22 · listed 2025-05-01	Duration unknown
Tue 29 Apr 2025· 6 changes
2025-04-29	Added to CISA KEV	CVE-2025-31324	SAPNetWeaver CISA KEV	fix due 2025-05-20	Duration unknown
2025-04-29	Added to CISA KEV	CVE-2025-1976	BroadcomBrocade Fabric OS CISA KEV	fix due 2025-05-19 · listed 2025-04-28	Duration unknown
2025-04-29	Added to CISA KEV	CVE-2025-42599	QualitiaActive! Mail CISA KEV	fix due 2025-05-19 · listed 2025-04-28	Duration unknown
2025-04-29	Added to CISA KEV	CVE-2025-3928	CommvaultWeb Server CISA KEV	fix due 2025-05-17 · listed 2025-04-28	Duration unknown
2025-04-29	Ransomware use confirmed	CVE-2015-2291	IntelEthernet Diagnostics Driver for Windows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-29	KEV due date moved	CVE-2025-3928	CommvaultWeb Server CISA KEV	stated at publication 2025-05-17, now states 2025-05-19	Time to revision 0 days
Thu 17 Apr 2025· 3 changes
2025-04-17	Added to CISA KEV	CVE-2025-24054	MicrosoftWindows CISA KEV	fix due 2025-05-08	Duration unknown
2025-04-17	Added to CISA KEV	CVE-2025-31201	AppleMultiple Products CISA KEV	fix due 2025-05-08	Duration unknown
2025-04-17	Added to CISA KEV	CVE-2025-31200	AppleMultiple Products CISA KEV	fix due 2025-05-08	Duration unknown
Wed 16 Apr 2025· 2 changes
2025-04-16	Added to CISA KEV	CVE-2021-20035	SonicWallSMA100 Appliances CISA KEV	fix due 2025-05-07	Duration unknown
2025-04-16	KEV required action changed	CVE-2023-44487	IETFHTTP/2 CISA KEV	stated at publication Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable., now states Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.	Duration unknown
Wed 9 Apr 2025· 4 changes
2025-04-09	Added to CISA KEV	CVE-2024-53150	LinuxKernel CISA KEV	fix due 2025-04-30	Duration unknown
2025-04-09	Added to CISA KEV	CVE-2024-53197	LinuxKernel CISA KEV	fix due 2025-04-30	Duration unknown
2025-04-09	Ransomware use confirmed	CVE-2025-29824	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Time to revision 1 days
2025-04-09	Ransomware use confirmed	CVE-2025-31161	CrushFTPCrushFTP CISA KEV	stated at publication Unknown, now states Known	Time to revision 2 days
Tue 8 Apr 2025· 2 changes
2025-04-08	Added to CISA KEV	CVE-2025-29824	MicrosoftWindows CISA KEV	fix due 2025-04-29	Duration unknown
2025-04-08	Added to CISA KEV	CVE-2025-30406	GladinetCentreStack CISA KEV	fix due 2025-04-29	Duration unknown
Mon 7 Apr 2025· 7 changes
2025-04-07	Added to CISA KEV	CVE-2025-31161	CrushFTPCrushFTP CISA KEV	fix due 2025-04-28	Duration unknown
2025-04-07	Ransomware use confirmed	CVE-2018-8639	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Time to revision 35 days
2025-04-07	Ransomware use confirmed	CVE-2024-38094	MicrosoftSharePoint CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-07	Ransomware use confirmed	CVE-2024-30051	MicrosoftDWM Core Library CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-07	Ransomware use confirmed	CVE-2024-3400	Palo Alto NetworksPAN-OS CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-07	Ransomware use confirmed	CVE-2022-42475	FortinetFortiOS CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-07	KEV required action changed	CVE-2025-22457	IvantiConnect Secure, Policy Secure and ZTA Gateways CISA KEV	stated at publication Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable., now states Apply mitigations as set forth in the CISA instructions linked below.	Time to revision 3 days
Fri 4 Apr 2025· 3 changes
2025-04-04	Added to CISA KEV	CVE-2025-22457	IvantiConnect Secure, Policy Secure and ZTA Gateways CISA KEV	fix due 2025-04-11	Duration unknown
2025-04-04	Ransomware use confirmed	CVE-2022-27925	SynacorZimbra Collaboration Suite (ZCS) CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2025-04-04	Ransomware use confirmed	CVE-2022-37042	SynacorZimbra Collaboration Suite (ZCS) CISA KEV	stated at publication Unknown, now states Known	Duration unknown
Tue 1 Apr 2025· 1 change
2025-04-01	Added to CISA KEV	CVE-2025-24813	ApacheTomcat CISA KEV	fix due 2025-04-22	Duration unknown

Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →