Every change, newest first
| Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin. | Kind | Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on. | Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry. | What changed | Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong. |
|---|---|---|---|---|---|
| Mon 6 Oct 2025· 2 record changes | |||||
| 2025-10-06 | Ransomware use confirmed | CVE-2025-61882 | OracleE-Business Suite CISA KEV | stated at publication Unknown, now states Known | Days to revision 0 |
| 2025-10-06 | Ransomware use confirmed | CVE-2025-10035 | FortraGoAnywhere MFT CISA KEV | stated at publication Unknown, now states Known | Days to revision 7 |
| Thu 2 Oct 2025· 5 record changes | |||||
| 2025-10-02 | Added to CISA KEV | CVE-2014-6278 | GNUGNU Bash CISA KEV | fix due 2025-10-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-02 | Added to CISA KEV | CVE-2017-1000353 | JenkinsJenkins CISA KEV | fix due 2025-10-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-02 | Added to CISA KEV | CVE-2015-7755 | JuniperScreenOS CISA KEV | fix due 2025-10-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-02 | Added to CISA KEV | CVE-2025-21043 | SamsungMobile Devices CISA KEV | fix due 2025-10-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-02 | Added to CISA KEV | CVE-2025-4008 | SmartbeddedMeteobridge CISA KEV | fix due 2025-10-23 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 29 Sep 2025· 5 record changes | |||||
| 2025-09-29 | Added to CISA KEV | CVE-2025-32463 | SudoSudo CISA KEV | fix due 2025-10-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-29 | Added to CISA KEV | CVE-2025-59689 | LibraesvaEmail Security Gateway CISA KEV | fix due 2025-10-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-29 | Added to CISA KEV | CVE-2025-10035 | FortraGoAnywhere MFT CISA KEV | fix due 2025-10-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-29 | Added to CISA KEV | CVE-2025-20352 | CiscoIOS and IOS XE CISA KEV | fix due 2025-10-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-29 | Added to CISA KEV | CVE-2021-21311 | AdminerAdminer CISA KEV | fix due 2025-10-20 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 25 Sep 2025· 2 record changes | |||||
| 2025-09-25 | Added to CISA KEV | CiscoSecure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | fix due 2025-09-26 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-09-25 | same kind of change as the line above | CVE-2025-20362 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-25 | same kind of change as the line above | CVE-2025-20333 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Tue 23 Sep 2025· 1 record change | |||||
| 2025-09-23 | Added to CISA KEV | CVE-2025-10585 | GoogleChromium V8 CISA KEV | fix due 2025-10-14 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 11 Sep 2025· 1 record change | |||||
| 2025-09-11 | Added to CISA KEV | CVE-2025-5086 | Dassault SystèmesDELMIA Apriso CISA KEV | fix due 2025-10-02 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 4 Sep 2025· 3 record changes | |||||
| 2025-09-04 | Added to CISA KEV | CVE-2025-38352 | LinuxKernel CISA KEV | fix due 2025-09-25 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-04 | Added to CISA KEV | CVE-2025-48543 | AndroidRuntime CISA KEV | fix due 2025-09-25 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-04 | Added to CISA KEV | CVE-2025-53690 | SitecoreMultiple Products CISA KEV | fix due 2025-09-25 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 3 Sep 2025· 2 record changes | |||||
| 2025-09-03 | Added to CISA KEV | CVE-2023-50224 | TP-LinkTL-WR841N CISA KEV | fix due 2025-09-24 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-03 | Added to CISA KEV | CVE-2025-9377 | TP-LinkMultiple Routers CISA KEV | fix due 2025-09-24 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 2 Sep 2025· 2 record changes | |||||
| 2025-09-02 | Added to CISA KEV | CVE-2020-24363 | TP-LinkTL-WA855RE CISA KEV | fix due 2025-09-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-09-02 | Added to CISA KEV | CVE-2025-55177 | Meta PlatformsWhatsApp CISA KEV | fix due 2025-09-23 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 29 Aug 2025· 1 record change | |||||
| 2025-08-29 | Added to CISA KEV | CVE-2025-57819 | SangomaFreePBX CISA KEV | fix due 2025-09-19 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 26 Aug 2025· 1 record change | |||||
| 2025-08-26 | Added to CISA KEV | CVE-2025-7775 | CitrixNetScaler CISA KEV | fix due 2025-08-28 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 25 Aug 2025· 3 record changes | |||||
| 2025-08-25 | Added to CISA KEV | CVE-2025-48384 | GitGit CISA KEV | fix due 2025-09-15 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-25 | Added to CISA KEV | CitrixSession Recording | fix due 2025-09-15 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-08-25 | same kind of change as the line above | CVE-2024-8068 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-25 | same kind of change as the line above | CVE-2024-8069 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Thu 21 Aug 2025· 1 record change | |||||
| 2025-08-21 | Added to CISA KEV | CVE-2025-43300 | AppleiOS, iPadOS, and macOS CISA KEV | fix due 2025-09-11 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 18 Aug 2025· 2 record changes | |||||
| 2025-08-18 | Added to CISA KEV | CVE-2025-54948 | Trend MicroApex One CISA KEV | fix due 2025-09-08 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-18 | Ransomware use confirmed | CVE-2025-5777 | CitrixNetScaler ADC and Gateway CISA KEV | stated at publication Unknown, now states Known | Days to revision 38 |
| Wed 13 Aug 2025· 2 record changes | |||||
| 2025-08-13 | Added to CISA KEV | N-ableN-Central | fix due 2025-08-20 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-08-13 | same kind of change as the line above | CVE-2025-8876 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-13 | same kind of change as the line above | CVE-2025-8875 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Tue 12 Aug 2025· 3 record changes | |||||
| 2025-08-12 | Added to CISA KEV | CVE-2025-8088 | RARLABWinRAR CISA KEV | fix due 2025-09-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-12 | Added to CISA KEV | CVE-2007-0671 | MicrosoftOffice CISA KEV | fix due 2025-09-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-12 | Added to CISA KEV | CVE-2013-3893 | MicrosoftInternet Explorer CISA KEV | fix due 2025-09-02 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 5 Aug 2025· 7 record changes | |||||
| 2025-08-05 | Added to CISA KEV | D-LinkDCS-2530L and DCS-2670L Devices | fix due 2025-08-26 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-08-05 | same kind of change as the line above | CVE-2020-25078 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-05 | same kind of change as the line above | CVE-2020-25079 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-05 | Added to CISA KEV | CVE-2022-40799 | D-LinkDNR-322L CISA KEV | fix due 2025-08-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-08-05 | Ransomware use confirmed | CVE-2025-53770 | MicrosoftSharePoint CISA KEV | stated at publication Unknown, now states Known | Days to revision 15 |
| 2025-08-05 | KEV required action changed | MicrosoftSharePoint | stated at publication CISA recommends disconnecting public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS). For example, SharePoint Server 2013 and earlier versions are end-of-life and should be discontinued if still in use. For supported versions, please follow the mitigations according to CISA and vendor instructions. Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available., now states Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. | Days to revision 14 | |
| 2025-08-05 | same kind of change as the line above | CVE-2025-49704 | same vendor as the line above | same change as the line above | Days to revision 14 |
| 2025-08-05 | same kind of change as the line above | CVE-2025-49706 | same vendor as the line above | same change as the line above | Days to revision 14 |
| 2025-08-05 | KEV required action changed | CVE-2025-53770 | MicrosoftSharePoint CISA KEV | stated at publication CISA recommends configuring AMSI integration in SharePoint and deploying Defender AV on all SharePoint servers. If AMSI cannot be enabled, CISA recommends disconnecting affected products that are public-facing on the internet from service until official mitigations are available. Once mitigations are provided, apply them according to CISA and vendor instructions. Follow the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. , now states Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. | Days to revision 15 |
| Mon 28 Jul 2025· 3 record changes | |||||
| 2025-07-28 | Added to CISA KEV | CVE-2023-2533 | PaperCutNG/MF CISA KEV | fix due 2025-08-18 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-28 | Added to CISA KEV | CiscoIdentity Services Engine | fix due 2025-08-18 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-07-28 | same kind of change as the line above | CVE-2025-20337 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-28 | same kind of change as the line above | CVE-2025-20281 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Fri 25 Jul 2025· 2 record changes | |||||
| 2025-07-25 | Ransomware use confirmed | MicrosoftSharePoint | stated at publication Unknown, now states Known | Days to revision 3 | |
| 2025-07-25 | same kind of change as the line above | CVE-2025-49704 | same vendor as the line above | same change as the line above | Days to revision 3 |
| 2025-07-25 | same kind of change as the line above | CVE-2025-49706 | same vendor as the line above | same change as the line above | Days to revision 3 |
| Tue 22 Jul 2025· 6 record changes | |||||
| 2025-07-22 | Added to CISA KEV | SysAidSysAid On-Prem | fix due 2025-08-12 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-07-22 | same kind of change as the line above | CVE-2025-2775 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-22 | same kind of change as the line above | CVE-2025-2776 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-22 | Added to CISA KEV | CVE-2025-6558 | GoogleChromium CISA KEV | fix due 2025-08-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-22 | Added to CISA KEV | CVE-2025-54309 | CrushFTPCrushFTP CISA KEV | fix due 2025-08-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-22 | Added to CISA KEV | MicrosoftSharePoint | fix due 2025-07-23 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-07-22 | same kind of change as the line above | CVE-2025-49704 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-22 | same kind of change as the line above | CVE-2025-49706 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Mon 21 Jul 2025· 1 record change | |||||
| 2025-07-21 | Added to CISA KEV | CVE-2025-53770 | MicrosoftSharePoint CISA KEV | fix due 2025-07-21 · listed 2025-07-20 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 18 Jul 2025· 2 record changes | |||||
| 2025-07-18 | Added to CISA KEV | CVE-2025-25257 | FortinetFortiWeb CISA KEV | fix due 2025-08-08 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-18 | Ransomware use confirmed | CVE-2019-0708 | MicrosoftRemote Desktop Services CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 143 |
| Mon 14 Jul 2025· 2 record changes | |||||
| 2025-07-14 | Added to CISA KEV | CVE-2025-47812 | Wing FTP ServerWing FTP Server CISA KEV | fix due 2025-08-04 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-14 | Ransomware use confirmed | CVE-2019-6693 | FortinetFortiOS CISA KEV | stated at publication Unknown, now states Known | Days to revision 19 |
| Fri 11 Jul 2025· 1 record change | |||||
| 2025-07-11 | Added to CISA KEV | CVE-2025-5777 | CitrixNetScaler ADC and Gateway CISA KEV | fix due 2025-07-11 · listed 2025-07-10 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 7 Jul 2025· 4 record changes | |||||
| 2025-07-07 | Added to CISA KEV | CVE-2019-9621 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2025-07-28 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-07 | Added to CISA KEV | CVE-2019-5418 | RailsRuby on Rails CISA KEV | fix due 2025-07-28 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-07 | Added to CISA KEV | CVE-2016-10033 | PHPPHPMailer CISA KEV | fix due 2025-07-28 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-07 | Added to CISA KEV | CVE-2014-3931 | Looking GlassMulti-Router Looking Glass (MRLG) CISA KEV | fix due 2025-07-28 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 2 Jul 2025· 1 record change | |||||
| 2025-07-02 | Added to CISA KEV | CVE-2025-6554 | GoogleChromium V8 CISA KEV | fix due 2025-07-23 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 1 Jul 2025· 3 record changes | |||||
| 2025-07-01 | Added to CISA KEV | TeleMessageTM SGNL | fix due 2025-07-22 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-07-01 | same kind of change as the line above | CVE-2025-48928 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-01 | same kind of change as the line above | CVE-2025-48927 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-07-01 | Added to CISA KEV | CVE-2025-6543 | CitrixNetScaler ADC and Gateway CISA KEV | fix due 2025-07-21 · listed 2025-06-30 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 25 Jun 2025· 3 record changes | |||||
| 2025-06-25 | Added to CISA KEV | CVE-2019-6693 | FortinetFortiOS CISA KEV | fix due 2025-07-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-25 | Added to CISA KEV | CVE-2024-0769 | D-LinkDIR-859 Router CISA KEV | fix due 2025-07-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-25 | Added to CISA KEV | CVE-2024-54085 | AMIMegaRAC SPx CISA KEV | fix due 2025-07-16 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 17 Jun 2025· 1 record change | |||||
| 2025-06-17 | Added to CISA KEV | CVE-2023-0386 | LinuxKernel CISA KEV | fix due 2025-07-08 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 16 Jun 2025· 2 record changes | |||||
| 2025-06-16 | Added to CISA KEV | CVE-2023-33538 | TP-LinkMultiple Routers CISA KEV | fix due 2025-07-07 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-16 | Added to CISA KEV | CVE-2025-43200 | AppleMultiple Products CISA KEV | fix due 2025-07-07 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 10 Jun 2025· 2 record changes | |||||
| 2025-06-10 | Added to CISA KEV | CVE-2025-33053 | Web Distributed Authoring and VersioningWeb Distributed Authoring and Versioning (WebDAV) CISA KEV | fix due 2025-07-01 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-10 | Added to CISA KEV | CVE-2025-24016 | WazuhWazuh Server CISA KEV | fix due 2025-07-01 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 9 Jun 2025· 20 record changes | |||||
| 2025-06-09 | Added to CISA KEV | CVE-2024-42009 | RoundcubeWebmail CISA KEV | fix due 2025-06-30 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | CVE-2025-32433 | ErlangErlang/OTP CISA KEV | fix due 2025-06-30 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | CVE-2025-5419 | GoogleChromium V8 CISA KEV | fix due 2025-06-26 · listed 2025-06-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | QualcommMultiple Chipsets | fix due 2025-06-24 · listed 2025-06-03 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-06-09 | same kind of change as the line above | CVE-2025-21479 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | same kind of change as the line above | CVE-2025-21480 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | same kind of change as the line above | CVE-2025-27038 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | CVE-2021-32030 | ASUSRouters CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | CVE-2025-3935 | ConnectWiseScreenConnect CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | Craft CMSCraft CMS | fix due 2025-06-23 · listed 2025-06-02 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-06-09 | same kind of change as the line above | CVE-2025-35939 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | same kind of change as the line above | CVE-2024-56145 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Added to CISA KEV | CVE-2023-39780 | ASUSRT-AX55 Routers CISA KEV | fix due 2025-06-23 · listed 2025-06-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-06-09 | Ransomware use confirmed | CVE-2024-57727 | SimpleHelp SimpleHelp CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2023-43208 | NextGen HealthcareMirth Connect CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2021-44529 | IvantiEndpoint Manager Cloud Service Appliance (EPM CSA) CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2024-21762 | FortinetFortiOS CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2022-30333 | RARLABUnRAR CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2022-27924 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2012-1710 | OracleFusion Middleware CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Ransomware use confirmed | CVE-2012-4681 | OracleJava SE CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 103 |
| 2025-06-09 | Removed from CISA KEV | CVE-2025-4664 | GoogleChromium CISA KEV | Previously listed from 2025-05-15 | Days to revision 25 |
| Thu 22 May 2025· 1 record change | |||||
| 2025-05-22 | Added to CISA KEV | CVE-2025-4632 | SamsungMagicINFO 9 Server CISA KEV | fix due 2025-06-12 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 19 May 2025· 6 record changes | |||||
| 2025-05-19 | Added to CISA KEV | CVE-2023-38950 | ZKTecoBioTime CISA KEV | fix due 2025-06-09 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-19 | Added to CISA KEV | CVE-2024-27443 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2025-06-09 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-19 | Added to CISA KEV | CVE-2025-27920 | SrimaxOutput Messenger CISA KEV | fix due 2025-06-09 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-19 | Added to CISA KEV | CVE-2024-11182 | MDaemonEmail Server CISA KEV | fix due 2025-06-09 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-19 | Added to CISA KEV | IvantiEndpoint Manager Mobile (EPMM) | fix due 2025-06-09 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-05-19 | same kind of change as the line above | CVE-2025-4428 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-19 | same kind of change as the line above | CVE-2025-4427 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| Thu 15 May 2025· 4 record changes | |||||
| 2025-05-15 | Added to CISA KEV | CVE-2025-42999 | SAPNetWeaver CISA KEV | fix due 2025-06-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-15 | Added to CISA KEV | CVE-2024-12987 | DrayTekVigor Routers CISA KEV | fix due 2025-06-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-15 | Added to CISA KEV | CVE-2025-4664 | GoogleChromium CISA KEV | fix due 2025-06-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-15 | Ransomware use confirmed | CVE-2025-31324 | SAPNetWeaver CISA KEV | stated at publication Unknown, now states Known | Days to revision 16 |
| Wed 14 May 2025· 1 record change | |||||
| 2025-05-14 | Added to CISA KEV | CVE-2025-32756 | FortinetMultiple Products CISA KEV | fix due 2025-06-04 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 13 May 2025· 8 record changes | |||||
| 2025-05-13 | Added to CISA KEV | MicrosoftWindows | fix due 2025-06-03 | Not applicable: Added to CISA KEV has no earlier value | |
| 2025-05-13 | same kind of change as the line above | CVE-2025-32709 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-13 | same kind of change as the line above | CVE-2025-30397 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-13 | same kind of change as the line above | CVE-2025-32706 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-13 | same kind of change as the line above | CVE-2025-32701 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-13 | same kind of change as the line above | CVE-2025-30400 | same vendor as the line above | same change as the line above | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-13 | Ransomware use confirmed | CVE-2022-2294 | WebRTCWebRTC CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 77 |
| 2025-05-13 | Ransomware use confirmed | MicrosoftWindows | stated at publication Unknown, now states Known | not dated | |
| 2025-05-13 | same kind of change as the line above | CVE-2022-21999 | same vendor as the line above | same change as the line above | Days to revision at least 77 |
| 2025-05-13 | same kind of change as the line above | CVE-2021-43890 | same vendor as the line above | same change as the line above | Days to revision at least 77 |
| Mon 12 May 2025· 4 record changes | |||||
| 2025-05-12 | Added to CISA KEV | CVE-2025-47729 | TeleMessageTM SGNL CISA KEV | fix due 2025-06-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-05-12 | Ransomware use confirmed | IvantiConnect Secure, Policy Secure, and ZTA Gateways | stated at publication Unknown, now states Known | Days to revision 38 | |
| 2025-05-12 | same kind of change as the line above | CVE-2025-22457 | same vendor as the line above | same change as the line above | Days to revision 38 |
| 2025-05-12 | same kind of change as the line above | CVE-2025-0282 | same vendor as the line above | same change as the line above | Days to revision at least 76 |
| 2025-05-12 | Ransomware use confirmed | CVE-2025-23006 | SonicWallSMA1000 Appliances CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 76 |
Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.
Data sources and quality
Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.
A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.
The units, the refusals, the cut-offs and every source, in full →