Added to CISA KEV
| Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin. | Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on. | Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry. | What changed | Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong. |
|---|---|---|---|---|
| Mon 9 Jun 2025· 11 changes | ||||
| 2025-06-09 | CVE-2024-42009 | RoundcubeWebmail CISA KEV | fix due 2025-06-30 | Duration unknown |
| 2025-06-09 | CVE-2025-32433 | ErlangErlang/OTP CISA KEV | fix due 2025-06-30 | Duration unknown |
| 2025-06-09 | CVE-2025-5419 | GoogleChromium V8 CISA KEV | fix due 2025-06-26 · listed 2025-06-05 | Duration unknown |
| 2025-06-09 | QualcommMultiple Chipsets | fix due 2025-06-24 · listed 2025-06-03 | Duration unknown | |
| 2025-06-09 | CVE-2025-21479 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-06-09 | CVE-2025-21480 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-06-09 | CVE-2025-27038 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-06-09 | CVE-2021-32030 | ASUSRouters CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Duration unknown |
| 2025-06-09 | CVE-2025-3935 | ConnectWiseScreenConnect CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Duration unknown |
| 2025-06-09 | Craft CMSCraft CMS | fix due 2025-06-23 · listed 2025-06-02 | Duration unknown | |
| 2025-06-09 | CVE-2025-35939 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-06-09 | CVE-2024-56145 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-06-09 | CVE-2023-39780 | ASUSRT-AX55 Routers CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Duration unknown |
| Thu 22 May 2025· 1 change | ||||
| 2025-05-22 | CVE-2025-4632 | SamsungMagicINFO 9 Server CISA KEV | fix due 2025-06-12 | Duration unknown |
| Mon 19 May 2025· 6 changes | ||||
| 2025-05-19 | CVE-2023-38950 | ZKTecoBioTime CISA KEV | fix due 2025-06-09 | Duration unknown |
| 2025-05-19 | CVE-2024-27443 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2025-06-09 | Duration unknown |
| 2025-05-19 | CVE-2025-27920 | SrimaxOutput Messenger CISA KEV | fix due 2025-06-09 | Duration unknown |
| 2025-05-19 | CVE-2024-11182 | MDaemonEmail Server CISA KEV | fix due 2025-06-09 | Duration unknown |
| 2025-05-19 | IvantiEndpoint Manager Mobile (EPMM) | fix due 2025-06-09 | Duration unknown | |
| 2025-05-19 | CVE-2025-4428 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-19 | CVE-2025-4427 | same vendor as the line above | same change as the line above | Duration unknown |
| Thu 15 May 2025· 3 changes | ||||
| 2025-05-15 | CVE-2025-42999 | SAPNetWeaver CISA KEV | fix due 2025-06-05 | Duration unknown |
| 2025-05-15 | CVE-2024-12987 | DrayTekVigor Routers CISA KEV | fix due 2025-06-05 | Duration unknown |
| 2025-05-15 | CVE-2025-4664 | GoogleChromium CISA KEV | fix due 2025-06-05 | Duration unknown |
| Wed 14 May 2025· 1 change | ||||
| 2025-05-14 | CVE-2025-32756 | FortinetMultiple Products CISA KEV | fix due 2025-06-04 | Duration unknown |
| Tue 13 May 2025· 5 changes | ||||
| 2025-05-13 | MicrosoftWindows | fix due 2025-06-03 | Duration unknown | |
| 2025-05-13 | CVE-2025-32709 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-13 | CVE-2025-30397 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-13 | CVE-2025-32706 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-13 | CVE-2025-32701 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-13 | CVE-2025-30400 | same vendor as the line above | same change as the line above | Duration unknown |
| Mon 12 May 2025· 1 change | ||||
| 2025-05-12 | CVE-2025-47729 | TeleMessageTM SGNL CISA KEV | fix due 2025-06-02 | Duration unknown |
| Wed 7 May 2025· 2 changes | ||||
| 2025-05-07 | GeoVisionMultiple Devices | fix due 2025-05-28 | Duration unknown | |
| 2025-05-07 | CVE-2024-11120 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-05-07 | CVE-2024-6047 | same vendor as the line above | same change as the line above | Duration unknown |
| Tue 6 May 2025· 1 change | ||||
| 2025-05-06 | CVE-2025-27363 | FreeTypeFreeType CISA KEV | fix due 2025-05-27 | Duration unknown |
| Mon 5 May 2025· 1 change | ||||
| 2025-05-05 | CVE-2025-3248 | LangflowLangflow CISA KEV | fix due 2025-05-26 | Duration unknown |
| Fri 2 May 2025· 4 changes | ||||
| 2025-05-02 | CVE-2025-34028 | CommvaultCommand Center CISA KEV | fix due 2025-05-23 | Duration unknown |
| 2025-05-02 | CVE-2024-58136 | YiiframeworkYii CISA KEV | fix due 2025-05-23 | Duration unknown |
| 2025-05-02 | CVE-2024-38475 | ApacheHTTP Server CISA KEV | fix due 2025-05-22 · listed 2025-05-01 | Duration unknown |
| 2025-05-02 | CVE-2023-44221 | SonicWallSMA100 Appliances CISA KEV | fix due 2025-05-22 · listed 2025-05-01 | Duration unknown |
| Tue 29 Apr 2025· 4 changes | ||||
| 2025-04-29 | CVE-2025-31324 | SAPNetWeaver CISA KEV | fix due 2025-05-20 | Duration unknown |
| 2025-04-29 | CVE-2025-1976 | BroadcomBrocade Fabric OS CISA KEV | fix due 2025-05-19 · listed 2025-04-28 | Duration unknown |
| 2025-04-29 | CVE-2025-42599 | QualitiaActive! Mail CISA KEV | fix due 2025-05-19 · listed 2025-04-28 | Duration unknown |
| 2025-04-29 | CVE-2025-3928 | CommvaultWeb Server CISA KEV | fix due 2025-05-17 · listed 2025-04-28 | Duration unknown |
| Thu 17 Apr 2025· 3 changes | ||||
| 2025-04-17 | CVE-2025-24054 | MicrosoftWindows CISA KEV | fix due 2025-05-08 | Duration unknown |
| 2025-04-17 | AppleMultiple Products | fix due 2025-05-08 | Duration unknown | |
| 2025-04-17 | CVE-2025-31201 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-04-17 | CVE-2025-31200 | same vendor as the line above | same change as the line above | Duration unknown |
| Wed 16 Apr 2025· 1 change | ||||
| 2025-04-16 | CVE-2021-20035 | SonicWallSMA100 Appliances CISA KEV | fix due 2025-05-07 | Duration unknown |
| Wed 9 Apr 2025· 2 changes | ||||
| 2025-04-09 | LinuxKernel | fix due 2025-04-30 | Duration unknown | |
| 2025-04-09 | CVE-2024-53150 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-04-09 | CVE-2024-53197 | same vendor as the line above | same change as the line above | Duration unknown |
| Tue 8 Apr 2025· 2 changes | ||||
| 2025-04-08 | CVE-2025-29824 | MicrosoftWindows CISA KEV | fix due 2025-04-29 | Duration unknown |
| 2025-04-08 | CVE-2025-30406 | GladinetCentreStack CISA KEV | fix due 2025-04-29 | Duration unknown |
| Mon 7 Apr 2025· 1 change | ||||
| 2025-04-07 | CVE-2025-31161 | CrushFTPCrushFTP CISA KEV | fix due 2025-04-28 | Duration unknown |
| Fri 4 Apr 2025· 1 change | ||||
| 2025-04-04 | CVE-2025-22457 | IvantiConnect Secure, Policy Secure and ZTA Gateways CISA KEV | fix due 2025-04-11 | Duration unknown |
| Tue 1 Apr 2025· 1 change | ||||
| 2025-04-01 | CVE-2025-24813 | ApacheTomcat CISA KEV | fix due 2025-04-22 | Duration unknown |
| Mon 31 Mar 2025· 1 change | ||||
| 2025-03-31 | CVE-2024-20439 | CiscoSmart Licensing Utility CISA KEV | fix due 2025-04-21 | Duration unknown |
| Thu 27 Mar 2025· 3 changes | ||||
| 2025-03-27 | CVE-2025-2783 | GoogleChromium Mojo CISA KEV | fix due 2025-04-17 | Duration unknown |
| 2025-03-27 | SitecoreCMS and Experience Platform (XP) | fix due 2025-04-16 · listed 2025-03-26 | Duration unknown | |
| 2025-03-27 | CVE-2019-9875 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-27 | CVE-2019-9874 | same vendor as the line above | same change as the line above | Duration unknown |
| Mon 24 Mar 2025· 1 change | ||||
| 2025-03-24 | CVE-2025-30154 | reviewdogaction-setup GitHub Action CISA KEV | fix due 2025-04-14 | Duration unknown |
| Wed 19 Mar 2025· 3 changes | ||||
| 2025-03-19 | CVE-2017-12637 | SAPNetWeaver CISA KEV | fix due 2025-04-09 | Duration unknown |
| 2025-03-19 | CVE-2024-48248 | NAKIVOBackup and Replication CISA KEV | fix due 2025-04-09 | Duration unknown |
| 2025-03-19 | CVE-2025-1316 | EdimaxIC-7100 IP Camera CISA KEV | fix due 2025-04-09 | Duration unknown |
| Tue 18 Mar 2025· 2 changes | ||||
| 2025-03-18 | CVE-2025-30066 | tj-actionschanged-files GitHub Action CISA KEV | fix due 2025-04-08 | Duration unknown |
| 2025-03-18 | CVE-2025-24472 | FortinetFortiOS and FortiProxy CISA KEV | fix due 2025-04-08 | Duration unknown |
| Thu 13 Mar 2025· 2 changes | ||||
| 2025-03-13 | CVE-2025-21590 | JuniperJunos OS CISA KEV | fix due 2025-04-03 | Duration unknown |
| 2025-03-13 | CVE-2025-24201 | AppleMultiple Products CISA KEV | fix due 2025-04-03 | Duration unknown |
| Tue 11 Mar 2025· 6 changes | ||||
| 2025-03-11 | MicrosoftWindows | fix due 2025-04-01 | Duration unknown | |
| 2025-03-11 | CVE-2025-24993 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-11 | CVE-2025-24991 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-11 | CVE-2025-24985 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-11 | CVE-2025-24984 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-11 | CVE-2025-24983 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-11 | CVE-2025-26633 | same vendor as the line above | same change as the line above | Duration unknown |
| Mon 10 Mar 2025· 5 changes | ||||
| 2025-03-10 | IvantiEndpoint Manager (EPM) | fix due 2025-03-31 | Duration unknown | |
| 2025-03-10 | CVE-2024-13161 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-10 | CVE-2024-13160 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-10 | CVE-2024-13159 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-10 | AdvantiveVeraCore | fix due 2025-03-31 | Duration unknown | |
| 2025-03-10 | CVE-2024-57968 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-10 | CVE-2025-25181 | same vendor as the line above | same change as the line above | Duration unknown |
| Tue 4 Mar 2025· 4 changes | ||||
| 2025-03-04 | CVE-2025-22226 | VMwareESXi, Workstation, and Fusion CISA KEV | fix due 2025-03-25 | Duration unknown |
| 2025-03-04 | CVE-2025-22225 | VMwareESXi CISA KEV | fix due 2025-03-25 | Duration unknown |
| 2025-03-04 | CVE-2025-22224 | VMwareESXi and Workstation CISA KEV | fix due 2025-03-25 | Duration unknown |
| 2025-03-04 | CVE-2024-50302 | LinuxKernel CISA KEV | fix due 2025-03-25 | Duration unknown |
| Mon 3 Mar 2025· 5 changes | ||||
| 2025-03-03 | CVE-2024-4885 | ProgressWhatsUp Gold CISA KEV | fix due 2025-03-24 | Duration unknown |
| 2025-03-03 | CVE-2018-8639 | MicrosoftWindows CISA KEV | fix due 2025-03-24 | Duration unknown |
| 2025-03-03 | Hitachi VantaraPentaho Business Analytics (BA) Server | fix due 2025-03-24 | Duration unknown | |
| 2025-03-03 | CVE-2022-43769 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-03 | CVE-2022-43939 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-03-03 | CVE-2023-20118 | CiscoSmall Business RV Series Routers CISA KEV | fix due 2025-03-24 | Duration unknown |
| Tue 25 Feb 2025· 2 changes | ||||
| 2025-02-25 | CVE-2023-34192 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2025-03-18 | Duration unknown |
| 2025-02-25 | CVE-2024-49035 | MicrosoftPartner Center CISA KEV | fix due 2025-03-18 | Duration unknown |
| Mon 24 Feb 2025· 2 changes | ||||
| 2025-02-24 | CVE-2024-20953 | OracleAgile Product Lifecycle Management (PLM) CISA KEV | fix due 2025-03-17 | Duration unknown |
| 2025-02-24 | CVE-2017-3066 | AdobeColdFusion CISA KEV | fix due 2025-03-17 | Duration unknown |
| Fri 21 Feb 2025· 1 change | ||||
| 2025-02-21 | CVE-2025-24989 | MicrosoftPower Pages CISA KEV | fix due 2025-03-14 | Duration unknown |
| Thu 20 Feb 2025· 2 changes | ||||
| 2025-02-20 | CVE-2025-0111 | Palo Alto NetworksPAN-OS CISA KEV | fix due 2025-03-13 | Duration unknown |
| 2025-02-20 | CVE-2025-23209 | Craft CMSCraft CMS CISA KEV | fix due 2025-03-13 | Duration unknown |
| Tue 18 Feb 2025· 2 changes | ||||
| 2025-02-18 | CVE-2025-0108 | Palo AltoPAN-OS CISA KEV | fix due 2025-04-08 | Duration unknown |
| 2025-02-18 | CVE-2024-53704 | SonicWallSonicOS CISA KEV | fix due 2025-03-11 | Duration unknown |
| Thu 13 Feb 2025· 1 change | ||||
| 2025-02-13 | CVE-2024-57727 | SimpleHelp SimpleHelp CISA KEV | fix due 2025-03-06 | Duration unknown |
| Wed 12 Feb 2025· 2 changes | ||||
| 2025-02-12 | CVE-2025-24200 | AppleiOS and iPadOS CISA KEV | fix due 2025-03-05 | Duration unknown |
| 2025-02-12 | CVE-2024-41710 | MitelSIP Phones CISA KEV | fix due 2025-03-05 | Duration unknown |
| Tue 11 Feb 2025· 4 changes | ||||
| 2025-02-11 | ZyxelDSL CPE Devices | fix due 2025-03-04 | Duration unknown | |
| 2025-02-11 | CVE-2024-40891 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-02-11 | CVE-2024-40890 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-02-11 | MicrosoftWindows | fix due 2025-03-04 | Duration unknown | |
| 2025-02-11 | CVE-2025-21418 | same vendor as the line above | same change as the line above | Duration unknown |
| 2025-02-11 | CVE-2025-21391 | same vendor as the line above | same change as the line above | Duration unknown |
| Fri 7 Feb 2025· 6 changes | ||||
| 2025-02-07 | CVE-2025-0994 | TrimbleCityworks CISA KEV | fix due 2025-02-28 | Duration unknown |
| 2025-02-07 | CVE-2020-15069 | SophosXG Firewall CISA KEV | fix due 2025-02-27 · listed 2025-02-06 | Duration unknown |
| 2025-02-07 | CVE-2020-29574 | SophosCyberoamOS CISA KEV | fix due 2025-02-27 · listed 2025-02-06 | Duration unknown |
| 2025-02-07 | CVE-2024-21413 | MicrosoftOffice Outlook CISA KEV | fix due 2025-02-27 · listed 2025-02-06 | Duration unknown |
| 2025-02-07 | CVE-2022-23748 | AudinateDante Discovery CISA KEV | fix due 2025-02-27 · listed 2025-02-06 | Duration unknown |
| 2025-02-07 | CVE-2025-0411 | 7-Zip7-Zip CISA KEV | fix due 2025-02-27 · listed 2025-02-06 | Duration unknown |
| Wed 5 Feb 2025· 1 change | ||||
| 2025-02-05 | CVE-2024-53104 | LinuxKernel CISA KEV | fix due 2025-02-26 | Duration unknown |
| Tue 4 Feb 2025· 4 changes | ||||
| 2025-02-04 | CVE-2018-19410 | PaesslerPTRG Network Monitor CISA KEV | fix due 2025-02-25 | Duration unknown |
| 2025-02-04 | CVE-2018-9276 | PaesslerPRTG Network Monitor CISA KEV | fix due 2025-02-25 | Duration unknown |
| 2025-02-04 | CVE-2024-29059 | Microsoft.NET Framework CISA KEV | fix due 2025-02-25 | Duration unknown |
| 2025-02-04 | CVE-2024-45195 | ApacheOFBiz CISA KEV | fix due 2025-02-25 | Duration unknown |
| Wed 29 Jan 2025· 1 change | ||||
| 2025-01-29 | CVE-2025-24085 | AppleMultiple Products CISA KEV | fix due 2025-02-19 | Duration unknown |
This kind is counted once per CVE record, so changes and records are the same number here. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.
What this page cannot see
Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.
A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.
The units, the refusals, the cut-offs and every source, in full →
Paste your closed CVE tickets and see which of these changes hit them →