Skip to content

Added to CISA KEV

Compare earlier and later source statements, with the dates and evidence behind each measured change.

447 changes · newest first · grouped by dayCSVJSONRSS

SinceClear the filter
Counted changes of "Added to CISA KEV", newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 9 Jun 2025· 11 changes
2025-06-09CVE-2024-42009
RoundcubeWebmail
CISA KEV
fix due 2025-06-30Duration unknown
2025-06-09CVE-2025-32433
ErlangErlang/OTP
CISA KEV
fix due 2025-06-30Duration unknown
2025-06-09CVE-2025-5419
GoogleChromium V8
CISA KEV
fix due 2025-06-26 · listed 2025-06-05Duration unknown
2025-06-09
QualcommMultiple Chipsets
fix due 2025-06-24 · listed 2025-06-03Duration unknown
2025-06-09CVE-2025-21479same vendor as the line abovesame change as the line aboveDuration unknown
2025-06-09CVE-2025-21480same vendor as the line abovesame change as the line aboveDuration unknown
2025-06-09CVE-2025-27038same vendor as the line abovesame change as the line aboveDuration unknown
2025-06-09CVE-2021-32030
ASUSRouters
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2025-3935
ConnectWiseScreenConnect
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09
Craft CMSCraft CMS
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2025-35939same vendor as the line abovesame change as the line aboveDuration unknown
2025-06-09CVE-2024-56145same vendor as the line abovesame change as the line aboveDuration unknown
2025-06-09CVE-2023-39780
ASUSRT-AX55 Routers
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
Thu 22 May 2025· 1 change
2025-05-22CVE-2025-4632
SamsungMagicINFO 9 Server
CISA KEV
fix due 2025-06-12Duration unknown
Mon 19 May 2025· 6 changes
2025-05-19CVE-2023-38950
ZKTecoBioTime
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2024-27443
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2025-27920
SrimaxOutput Messenger
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2024-11182
MDaemonEmail Server
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19
IvantiEndpoint Manager Mobile (EPMM)
fix due 2025-06-09Duration unknown
2025-05-19CVE-2025-4428same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-19CVE-2025-4427same vendor as the line abovesame change as the line aboveDuration unknown
Thu 15 May 2025· 3 changes
2025-05-15CVE-2025-42999
SAPNetWeaver
CISA KEV
fix due 2025-06-05Duration unknown
2025-05-15CVE-2024-12987
DrayTekVigor Routers
CISA KEV
fix due 2025-06-05Duration unknown
2025-05-15CVE-2025-4664
GoogleChromium
CISA KEV
fix due 2025-06-05Duration unknown
Wed 14 May 2025· 1 change
2025-05-14CVE-2025-32756
FortinetMultiple Products
CISA KEV
fix due 2025-06-04Duration unknown
Tue 13 May 2025· 5 changes
2025-05-13
MicrosoftWindows
fix due 2025-06-03Duration unknown
2025-05-13CVE-2025-32709same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-13CVE-2025-30397same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-13CVE-2025-32706same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-13CVE-2025-32701same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-13CVE-2025-30400same vendor as the line abovesame change as the line aboveDuration unknown
Mon 12 May 2025· 1 change
2025-05-12CVE-2025-47729
TeleMessageTM SGNL
CISA KEV
fix due 2025-06-02Duration unknown
Wed 7 May 2025· 2 changes
2025-05-07
GeoVisionMultiple Devices
fix due 2025-05-28Duration unknown
2025-05-07CVE-2024-11120same vendor as the line abovesame change as the line aboveDuration unknown
2025-05-07CVE-2024-6047same vendor as the line abovesame change as the line aboveDuration unknown
Tue 6 May 2025· 1 change
2025-05-06CVE-2025-27363
FreeTypeFreeType
CISA KEV
fix due 2025-05-27Duration unknown
Mon 5 May 2025· 1 change
2025-05-05CVE-2025-3248
LangflowLangflow
CISA KEV
fix due 2025-05-26Duration unknown
Fri 2 May 2025· 4 changes
2025-05-02CVE-2025-34028
CommvaultCommand Center
CISA KEV
fix due 2025-05-23Duration unknown
2025-05-02CVE-2024-58136CISA KEVfix due 2025-05-23Duration unknown
2025-05-02CVE-2024-38475
ApacheHTTP Server
CISA KEV
fix due 2025-05-22 · listed 2025-05-01Duration unknown
2025-05-02CVE-2023-44221
SonicWallSMA100 Appliances
CISA KEV
fix due 2025-05-22 · listed 2025-05-01Duration unknown
Tue 29 Apr 2025· 4 changes
2025-04-29CVE-2025-31324
SAPNetWeaver
CISA KEV
fix due 2025-05-20Duration unknown
2025-04-29CVE-2025-1976
BroadcomBrocade Fabric OS
CISA KEV
fix due 2025-05-19 · listed 2025-04-28Duration unknown
2025-04-29CVE-2025-42599
QualitiaActive! Mail
CISA KEV
fix due 2025-05-19 · listed 2025-04-28Duration unknown
2025-04-29CVE-2025-3928
CommvaultWeb Server
CISA KEV
fix due 2025-05-17 · listed 2025-04-28Duration unknown
Thu 17 Apr 2025· 3 changes
2025-04-17CVE-2025-24054
MicrosoftWindows
CISA KEV
fix due 2025-05-08Duration unknown
2025-04-17
AppleMultiple Products
fix due 2025-05-08Duration unknown
2025-04-17CVE-2025-31201same vendor as the line abovesame change as the line aboveDuration unknown
2025-04-17CVE-2025-31200same vendor as the line abovesame change as the line aboveDuration unknown
Wed 16 Apr 2025· 1 change
2025-04-16CVE-2021-20035
SonicWallSMA100 Appliances
CISA KEV
fix due 2025-05-07Duration unknown
Wed 9 Apr 2025· 2 changes
2025-04-09
LinuxKernel
fix due 2025-04-30Duration unknown
2025-04-09CVE-2024-53150same vendor as the line abovesame change as the line aboveDuration unknown
2025-04-09CVE-2024-53197same vendor as the line abovesame change as the line aboveDuration unknown
Tue 8 Apr 2025· 2 changes
2025-04-08CVE-2025-29824
MicrosoftWindows
CISA KEV
fix due 2025-04-29Duration unknown
2025-04-08CVE-2025-30406
GladinetCentreStack
CISA KEV
fix due 2025-04-29Duration unknown
Mon 7 Apr 2025· 1 change
2025-04-07CVE-2025-31161
CrushFTPCrushFTP
CISA KEV
fix due 2025-04-28Duration unknown
Fri 4 Apr 2025· 1 change
2025-04-04CVE-2025-22457
IvantiConnect Secure, Policy Secure and ZTA Gateways
CISA KEV
fix due 2025-04-11Duration unknown
Tue 1 Apr 2025· 1 change
2025-04-01CVE-2025-24813
ApacheTomcat
CISA KEV
fix due 2025-04-22Duration unknown
Mon 31 Mar 2025· 1 change
2025-03-31CVE-2024-20439
CiscoSmart Licensing Utility
CISA KEV
fix due 2025-04-21Duration unknown
Thu 27 Mar 2025· 3 changes
2025-03-27CVE-2025-2783
GoogleChromium Mojo
CISA KEV
fix due 2025-04-17Duration unknown
2025-03-27
SitecoreCMS and Experience Platform (XP)
fix due 2025-04-16 · listed 2025-03-26Duration unknown
2025-03-27CVE-2019-9875same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-27CVE-2019-9874same vendor as the line abovesame change as the line aboveDuration unknown
Mon 24 Mar 2025· 1 change
2025-03-24CVE-2025-30154
reviewdogaction-setup GitHub Action
CISA KEV
fix due 2025-04-14Duration unknown
Wed 19 Mar 2025· 3 changes
2025-03-19CVE-2017-12637
SAPNetWeaver
CISA KEV
fix due 2025-04-09Duration unknown
2025-03-19CVE-2024-48248
NAKIVOBackup and Replication
CISA KEV
fix due 2025-04-09Duration unknown
2025-03-19CVE-2025-1316
EdimaxIC-7100 IP Camera
CISA KEV
fix due 2025-04-09Duration unknown
Tue 18 Mar 2025· 2 changes
2025-03-18CVE-2025-30066
tj-actionschanged-files GitHub Action
CISA KEV
fix due 2025-04-08Duration unknown
2025-03-18CVE-2025-24472
FortinetFortiOS and FortiProxy
CISA KEV
fix due 2025-04-08Duration unknown
Thu 13 Mar 2025· 2 changes
2025-03-13CVE-2025-21590
JuniperJunos OS
CISA KEV
fix due 2025-04-03Duration unknown
2025-03-13CVE-2025-24201
AppleMultiple Products
CISA KEV
fix due 2025-04-03Duration unknown
Tue 11 Mar 2025· 6 changes
2025-03-11
MicrosoftWindows
fix due 2025-04-01Duration unknown
2025-03-11CVE-2025-24993same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-11CVE-2025-24991same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-11CVE-2025-24985same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-11CVE-2025-24984same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-11CVE-2025-24983same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-11CVE-2025-26633same vendor as the line abovesame change as the line aboveDuration unknown
Mon 10 Mar 2025· 5 changes
2025-03-10
IvantiEndpoint Manager (EPM)
fix due 2025-03-31Duration unknown
2025-03-10CVE-2024-13161same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-10CVE-2024-13160same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-10CVE-2024-13159same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-10
AdvantiveVeraCore
fix due 2025-03-31Duration unknown
2025-03-10CVE-2024-57968same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-10CVE-2025-25181same vendor as the line abovesame change as the line aboveDuration unknown
Tue 4 Mar 2025· 4 changes
2025-03-04CVE-2025-22226
VMwareESXi, Workstation, and Fusion
CISA KEV
fix due 2025-03-25Duration unknown
2025-03-04CVE-2025-22225
VMwareESXi
CISA KEV
fix due 2025-03-25Duration unknown
2025-03-04CVE-2025-22224
VMwareESXi and Workstation
CISA KEV
fix due 2025-03-25Duration unknown
2025-03-04CVE-2024-50302
LinuxKernel
CISA KEV
fix due 2025-03-25Duration unknown
Mon 3 Mar 2025· 5 changes
2025-03-03CVE-2024-4885
ProgressWhatsUp Gold
CISA KEV
fix due 2025-03-24Duration unknown
2025-03-03CVE-2018-8639
MicrosoftWindows
CISA KEV
fix due 2025-03-24Duration unknown
2025-03-03
Hitachi VantaraPentaho Business Analytics (BA) Server
fix due 2025-03-24Duration unknown
2025-03-03CVE-2022-43769same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-03CVE-2022-43939same vendor as the line abovesame change as the line aboveDuration unknown
2025-03-03CVE-2023-20118
CiscoSmall Business RV Series Routers
CISA KEV
fix due 2025-03-24Duration unknown
Tue 25 Feb 2025· 2 changes
2025-02-25CVE-2023-34192
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2025-03-18Duration unknown
2025-02-25CVE-2024-49035
MicrosoftPartner Center
CISA KEV
fix due 2025-03-18Duration unknown
Mon 24 Feb 2025· 2 changes
2025-02-24CVE-2024-20953
OracleAgile Product Lifecycle Management (PLM)
CISA KEV
fix due 2025-03-17Duration unknown
2025-02-24CVE-2017-3066
AdobeColdFusion
CISA KEV
fix due 2025-03-17Duration unknown
Fri 21 Feb 2025· 1 change
2025-02-21CVE-2025-24989
MicrosoftPower Pages
CISA KEV
fix due 2025-03-14Duration unknown
Thu 20 Feb 2025· 2 changes
2025-02-20CVE-2025-0111CISA KEVfix due 2025-03-13Duration unknown
2025-02-20CVE-2025-23209
Craft CMSCraft CMS
CISA KEV
fix due 2025-03-13Duration unknown
Tue 18 Feb 2025· 2 changes
2025-02-18CVE-2025-0108
Palo AltoPAN-OS
CISA KEV
fix due 2025-04-08Duration unknown
2025-02-18CVE-2024-53704
SonicWallSonicOS
CISA KEV
fix due 2025-03-11Duration unknown
Thu 13 Feb 2025· 1 change
2025-02-13CVE-2024-57727
SimpleHelp SimpleHelp
CISA KEV
fix due 2025-03-06Duration unknown
Wed 12 Feb 2025· 2 changes
2025-02-12CVE-2025-24200
AppleiOS and iPadOS
CISA KEV
fix due 2025-03-05Duration unknown
2025-02-12CVE-2024-41710
MitelSIP Phones
CISA KEV
fix due 2025-03-05Duration unknown
Tue 11 Feb 2025· 4 changes
2025-02-11
ZyxelDSL CPE Devices
fix due 2025-03-04Duration unknown
2025-02-11CVE-2024-40891same vendor as the line abovesame change as the line aboveDuration unknown
2025-02-11CVE-2024-40890same vendor as the line abovesame change as the line aboveDuration unknown
2025-02-11
MicrosoftWindows
fix due 2025-03-04Duration unknown
2025-02-11CVE-2025-21418same vendor as the line abovesame change as the line aboveDuration unknown
2025-02-11CVE-2025-21391same vendor as the line abovesame change as the line aboveDuration unknown
Fri 7 Feb 2025· 6 changes
2025-02-07CVE-2025-0994
TrimbleCityworks
CISA KEV
fix due 2025-02-28Duration unknown
2025-02-07CVE-2020-15069
SophosXG Firewall
CISA KEV
fix due 2025-02-27 · listed 2025-02-06Duration unknown
2025-02-07CVE-2020-29574
SophosCyberoamOS
CISA KEV
fix due 2025-02-27 · listed 2025-02-06Duration unknown
2025-02-07CVE-2024-21413
MicrosoftOffice Outlook
CISA KEV
fix due 2025-02-27 · listed 2025-02-06Duration unknown
2025-02-07CVE-2022-23748
AudinateDante Discovery
CISA KEV
fix due 2025-02-27 · listed 2025-02-06Duration unknown
2025-02-07CVE-2025-0411
7-Zip7-Zip
CISA KEV
fix due 2025-02-27 · listed 2025-02-06Duration unknown
Wed 5 Feb 2025· 1 change
2025-02-05CVE-2024-53104
LinuxKernel
CISA KEV
fix due 2025-02-26Duration unknown
Tue 4 Feb 2025· 4 changes
2025-02-04CVE-2018-19410
PaesslerPTRG Network Monitor
CISA KEV
fix due 2025-02-25Duration unknown
2025-02-04CVE-2018-9276
PaesslerPRTG Network Monitor
CISA KEV
fix due 2025-02-25Duration unknown
2025-02-04CVE-2024-29059
Microsoft.NET Framework
CISA KEV
fix due 2025-02-25Duration unknown
2025-02-04CVE-2024-45195
ApacheOFBiz
CISA KEV
fix due 2025-02-25Duration unknown
Wed 29 Jan 2025· 1 change
2025-01-29CVE-2025-24085
AppleMultiple Products
CISA KEV
fix due 2025-02-19Duration unknown

This kind is counted once per CVE record, so changes and records are the same number here. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →