CISA Known Exploited Vulnerabilities
KEV additions — April 2025
15 CVEs entered the KEV catalog in April 2025.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added April 29, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-31324ransomware | SAP NetWeaver Unrestricted File Upload Vulnerability | 9.8 | 99.5 % | May 20, 2025 |
Added April 28, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability | 6.7 | 0.7 % | May 19, 2025 |
| CVE-2025-3928 | Commvault Web Server Unspecified Vulnerability | 8.8 | 2.5 % | May 19, 2025 |
| CVE-2025-42599 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 9.8 | 3.4 % | May 19, 2025 |
Added April 17, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 5.4 | 62.3 % | May 8, 2025 |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | 9.8 | 20.9 % | May 8, 2025 |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | 9.8 | 13.9 % | May 8, 2025 |
Added April 16, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 6.5 | 4.2 % | May 7, 2025 |
Added April 9, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-53150 | Linux Kernel Out-of-Bounds Read Vulnerability | 7.1 | 1.4 % | Apr 30, 2025 |
| CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability | 7.8 | 4.1 % | Apr 30, 2025 |
Added April 8, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-29824ransomware | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 7.8 | 13.9 % | Apr 29, 2025 |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 9.8 | 94.3 % | Apr 29, 2025 |
Added April 7, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-31161ransomware | CrushFTP Authentication Bypass Vulnerability | 9.8 | 100.0 % | Apr 28, 2025 |
Added April 4, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-22457ransomware | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 9.8 | 100.0 % | Apr 11, 2025 |
Added April 1, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability | 9.8 | 99.9 % | Apr 22, 2025 |