Security Digest archive
October 2025
5 editorial briefs, 31 known exploited (cisa kev) additions and 29 critical advisories across 21 digest days.
Thursday, October 30, 2025
- KEV CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools
- KEV CVE-2025-24893 XWiki Platform
Wednesday, October 29, 2025
- Critical 1 advisory: DNN.PLATFORM
Tuesday, October 28, 2025
- KEV CVE-2025-6205 Dassault Systèmes DELMIA Apriso
- KEV CVE-2025-6204 Dassault Systèmes DELMIA Apriso
Friday, October 24, 2025
- KEV CVE-2025-59287 Microsoft Windows
- KEV CVE-2025-54236 Adobe Commerce and Magento
- Critical 1 advisory: github.com/karmada-io/dashboard
Thursday, October 23, 2025
- Patch this week Microsoft WSUS CVE-2025-59287: Unauthenticated SYSTEM RCE
Wednesday, October 22, 2025
- KEV CVE-2025-61932 Motex LANSCOPE Endpoint Manager
Tuesday, October 21, 2025
- Critical 2 advisories: github.com/neuvector/neuvector, github.com/cosmos/evm
Monday, October 20, 2025
- KEV CVE-2025-61884 Oracle E-Business Suite
- KEV CVE-2025-33073 Microsoft Windows
- KEV CVE-2025-2747 Kentico Xperience CMS
- KEV CVE-2025-2746 Kentico Xperience CMS
- KEV CVE-2022-48503 Apple Multiple Products
- Critical 1 advisory: github.com/netbirdio/netbird
Friday, October 17, 2025
- Check exposure GlassWorm: Invisible-Unicode Malware in Open VSX Extensions
- Critical 3 advisories: pyquokka, keras, net.mingsoft:ms-mcms
Thursday, October 16, 2025
- Critical 3 advisories: bagisto/bagisto, prestashop/ps_checkout, Apache.NMS.AMQP
Wednesday, October 15, 2025
- Patch this week F5 Breach: Nation-State Stole BIG-IP Source Code
- KEV CVE-2025-54253 Adobe Experience Manager (AEM) Forms
- Critical 1 advisory: happy-dom
Tuesday, October 14, 2025
- KEV CVE-2025-59230 Microsoft Windows
- KEV CVE-2025-47827 IGEL IGEL OS
- KEV CVE-2025-24990 Microsoft Windows
- KEV CVE-2016-7836 SKYSEA Client View
- Critical 1 advisory: Microsoft.AspNetCore.App.Runtime.linux…
Friday, October 10, 2025
- Critical 1 advisory: happy-dom
Thursday, October 9, 2025
- KEV CVE-2021-43798 Grafana Labs Grafana
- Critical 4 advisories: scio-pypi, flowise, bbot, bbot
Wednesday, October 8, 2025
- Critical 3 advisories: melisplatform/melis-core, melisplatform/melis-cms, melisplatform/melis-cms-slider
Tuesday, October 7, 2025
- KEV CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS)
- Critical 1 advisory: Akka.Remote
Monday, October 6, 2025
- KEV CVE-2025-61882 Oracle E-Business Suite
- KEV CVE-2021-43226 Microsoft Windows
- KEV CVE-2021-22555 Linux Kernel
- KEV CVE-2013-3918 Microsoft Windows
- KEV CVE-2011-3402 Microsoft Windows
- KEV CVE-2010-3962 Microsoft Internet Explorer
- KEV CVE-2010-3765 Mozilla Multiple Products
- Critical 4 advisories: flowise, org.xwiki.platform:xwiki-platform-rest…, org.xwiki.contrib.oidc:oidc-authenticat…, sillytavern
Saturday, October 4, 2025
Friday, October 3, 2025
- Patch this week RediShell: 13-Year-Old Lua Use-After-Free RCE in Redis
- Critical 1 advisory: flowise
Thursday, October 2, 2025
- KEV CVE-2025-4008 Smartbedded Meteobridge
- KEV CVE-2025-21043 Samsung Mobile Devices
- KEV CVE-2017-1000353 Jenkins Jenkins
- KEV CVE-2015-7755 Juniper ScreenOS
- KEV CVE-2014-6278 GNU GNU Bash
Wednesday, October 1, 2025
- Critical 2 advisories: risc0-zkvm-platform, pyfory