---
title: "Known exploited vulnerabilities (page 4)"
url: https://erroneo.us/security/kev/4/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 4 of 8."
type: kev
section: "Security Digest"
date_modified: 2025-11-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities (page 4)

- 2025-11-04 [CVE-2025-11371](https://erroneo.us/security/cve/CVE-2025-11371/index.md) Gladinet CentreStack and Triofox: Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability (due 2025-11-25; ransomware: Unknown)
- 2025-10-30 [CVE-2025-41244](https://erroneo.us/security/cve/CVE-2025-41244/index.md) Broadcom VMware Aria Operations and VMware Tools: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability (due 2025-11-20; ransomware: Unknown)
- 2025-10-30 [CVE-2025-24893](https://erroneo.us/security/cve/CVE-2025-24893/index.md) XWiki Platform: XWiki Platform Eval Injection Vulnerability (due 2025-11-20; ransomware: Unknown)
- 2025-10-28 [CVE-2025-6205](https://erroneo.us/security/cve/CVE-2025-6205/index.md) Dassault Systèmes DELMIA Apriso: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability (due 2025-11-18; ransomware: Unknown)
- 2025-10-28 [CVE-2025-6204](https://erroneo.us/security/cve/CVE-2025-6204/index.md) Dassault Systèmes DELMIA Apriso: Dassault Systèmes DELMIA Apriso Code Injection Vulnerability (due 2025-11-18; ransomware: Unknown)
- 2025-10-24 [CVE-2025-59287](https://erroneo.us/security/cve/CVE-2025-59287/index.md) Microsoft Windows: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability (due 2025-11-14; ransomware: Unknown)
- 2025-10-24 [CVE-2025-54236](https://erroneo.us/security/cve/CVE-2025-54236/index.md) Adobe Commerce and Magento: Adobe Commerce and Magento Improper Input Validation Vulnerability (due 2025-11-14; ransomware: Unknown)
- 2025-10-22 [CVE-2025-61932](https://erroneo.us/security/cve/CVE-2025-61932/index.md) Motex LANSCOPE Endpoint Manager: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability (due 2025-11-12; ransomware: Unknown)
- 2025-10-20 [CVE-2025-61884](https://erroneo.us/security/cve/CVE-2025-61884/index.md) Oracle E-Business Suite: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability (due 2025-11-10; ransomware: Known)
- 2025-10-20 [CVE-2025-33073](https://erroneo.us/security/cve/CVE-2025-33073/index.md) Microsoft Windows: Microsoft Windows SMB Client Improper Access Control Vulnerability (due 2025-11-10; ransomware: Unknown)
- 2025-10-20 [CVE-2025-2747](https://erroneo.us/security/cve/CVE-2025-2747/index.md) Kentico Xperience CMS: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2025-11-10; ransomware: Unknown)
- 2025-10-20 [CVE-2025-2746](https://erroneo.us/security/cve/CVE-2025-2746/index.md) Kentico Xperience CMS: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2025-11-10; ransomware: Unknown)
- 2025-10-20 [CVE-2022-48503](https://erroneo.us/security/cve/CVE-2022-48503/index.md) Apple Multiple Products: Apple Multiple Products Unspecified Vulnerability (due 2025-11-10; ransomware: Unknown)
- 2025-10-15 [CVE-2025-54253](https://erroneo.us/security/cve/CVE-2025-54253/index.md) Adobe Experience Manager (AEM) Forms: Adobe Experience Manager Forms Code Execution Vulnerability (due 2025-11-05; ransomware: Unknown)
- 2025-10-14 [CVE-2025-59230](https://erroneo.us/security/cve/CVE-2025-59230/index.md) Microsoft Windows: Microsoft Windows Improper Access Control Vulnerability (due 2025-11-04; ransomware: Unknown)
- 2025-10-14 [CVE-2025-47827](https://erroneo.us/security/cve/CVE-2025-47827/index.md) IGEL IGEL OS: IGEL OS Use of a Key Past its Expiration Date Vulnerability (due 2025-11-04; ransomware: Unknown)
- 2025-10-14 [CVE-2025-24990](https://erroneo.us/security/cve/CVE-2025-24990/index.md) Microsoft Windows: Microsoft Windows Untrusted Pointer Dereference Vulnerability (due 2025-11-04; ransomware: Unknown)
- 2025-10-14 [CVE-2016-7836](https://erroneo.us/security/cve/CVE-2016-7836/index.md) SKYSEA Client View: SKYSEA Client View Improper Authentication Vulnerability (due 2025-11-04; ransomware: Unknown)
- 2025-10-09 [CVE-2021-43798](https://erroneo.us/security/cve/CVE-2021-43798/index.md) Grafana Labs Grafana: Grafana Path Traversal Vulnerability (due 2025-10-30; ransomware: Unknown)
- 2025-10-07 [CVE-2025-27915](https://erroneo.us/security/cve/CVE-2025-27915/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (due 2025-10-28; ransomware: Unknown)
- 2025-10-06 [CVE-2025-61882](https://erroneo.us/security/cve/CVE-2025-61882/index.md) Oracle E-Business Suite: Oracle E-Business Suite Unspecified Vulnerability (due 2025-10-27; ransomware: Known)
- 2025-10-06 [CVE-2021-43226](https://erroneo.us/security/cve/CVE-2021-43226/index.md) Microsoft Windows: Microsoft Windows Privilege Escalation Vulnerability (due 2025-10-27; ransomware: Known)
- 2025-10-06 [CVE-2021-22555](https://erroneo.us/security/cve/CVE-2021-22555/index.md) Linux Kernel: Linux Kernel Heap Out-of-Bounds Write Vulnerability (due 2025-10-27; ransomware: Unknown)
- 2025-10-06 [CVE-2013-3918](https://erroneo.us/security/cve/CVE-2013-3918/index.md) Microsoft Windows: Microsoft Windows Out-of-Bounds Write Vulnerability (due 2025-10-27; ransomware: Unknown)
- 2025-10-06 [CVE-2011-3402](https://erroneo.us/security/cve/CVE-2011-3402/index.md) Microsoft Windows: Microsoft Windows Remote Code Execution Vulnerability (due 2025-10-27; ransomware: Unknown)
- 2025-10-06 [CVE-2010-3962](https://erroneo.us/security/cve/CVE-2010-3962/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability (due 2025-10-27; ransomware: Unknown)
- 2025-10-06 [CVE-2010-3765](https://erroneo.us/security/cve/CVE-2010-3765/index.md) Mozilla Multiple Products: Mozilla Multiple Products Remote Code Execution Vulnerability (due 2025-10-27; ransomware: Unknown)
- 2025-10-02 [CVE-2025-4008](https://erroneo.us/security/cve/CVE-2025-4008/index.md) Smartbedded Meteobridge: Smartbedded Meteobridge Command Injection Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2025-10-02 [CVE-2025-21043](https://erroneo.us/security/cve/CVE-2025-21043/index.md) Samsung Mobile Devices: Samsung Mobile Devices Out-of-Bounds Write Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2025-10-02 [CVE-2017-1000353](https://erroneo.us/security/cve/CVE-2017-1000353/index.md) Jenkins Jenkins: Jenkins Remote Code Execution Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2025-10-02 [CVE-2015-7755](https://erroneo.us/security/cve/CVE-2015-7755/index.md) Juniper ScreenOS: Juniper ScreenOS Improper Authentication Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2025-10-02 [CVE-2014-6278](https://erroneo.us/security/cve/CVE-2014-6278/index.md) GNU GNU Bash: GNU Bash OS Command Injection Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2025-09-29 [CVE-2025-59689](https://erroneo.us/security/cve/CVE-2025-59689/index.md) Libraesva Email Security Gateway: Libraesva Email Security Gateway Command Injection Vulnerability (due 2025-10-20; ransomware: Unknown)
- 2025-09-29 [CVE-2025-32463](https://erroneo.us/security/cve/CVE-2025-32463/index.md) Sudo Sudo: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability (due 2025-10-20; ransomware: Unknown)
- 2025-09-29 [CVE-2025-20352](https://erroneo.us/security/cve/CVE-2025-20352/index.md) Cisco IOS and IOS XE: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (due 2025-10-20; ransomware: Unknown)
- 2025-09-29 [CVE-2025-10035](https://erroneo.us/security/cve/CVE-2025-10035/index.md) Fortra GoAnywhere MFT: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability (due 2025-10-20; ransomware: Known)
- 2025-09-29 [CVE-2021-21311](https://erroneo.us/security/cve/CVE-2021-21311/index.md) Adminer Adminer: Adminer Server-Side Request Forgery Vulnerability (due 2025-10-20; ransomware: Unknown)
- 2025-09-25 [CVE-2025-20362](https://erroneo.us/security/cve/CVE-2025-20362/index.md) Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability (due 2025-09-26; ransomware: Unknown)
- 2025-09-25 [CVE-2025-20333](https://erroneo.us/security/cve/CVE-2025-20333/index.md) Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability (due 2025-09-26; ransomware: Unknown)
- 2025-09-23 [CVE-2025-10585](https://erroneo.us/security/cve/CVE-2025-10585/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2025-10-14; ransomware: Unknown)
- 2025-09-11 [CVE-2025-5086](https://erroneo.us/security/cve/CVE-2025-5086/index.md) Dassault Systèmes DELMIA Apriso: Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability (due 2025-10-02; ransomware: Unknown)
- 2025-09-04 [CVE-2025-53690](https://erroneo.us/security/cve/CVE-2025-53690/index.md) Sitecore Multiple Products: Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability (due 2025-09-25; ransomware: Unknown)
- 2025-09-04 [CVE-2025-48543](https://erroneo.us/security/cve/CVE-2025-48543/index.md) Android Runtime: Android Runtime Use-After-Free Vulnerability (due 2025-09-25; ransomware: Unknown)
- 2025-09-04 [CVE-2025-38352](https://erroneo.us/security/cve/CVE-2025-38352/index.md) Linux Kernel: Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability (due 2025-09-25; ransomware: Unknown)
- 2025-09-03 [CVE-2025-9377](https://erroneo.us/security/cve/CVE-2025-9377/index.md) TP-Link Multiple Routers: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability (due 2025-09-24; ransomware: Unknown)
- 2025-09-03 [CVE-2023-50224](https://erroneo.us/security/cve/CVE-2023-50224/index.md) TP-Link TL-WR841N: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability (due 2025-09-24; ransomware: Unknown)
- 2025-09-02 [CVE-2025-55177](https://erroneo.us/security/cve/CVE-2025-55177/index.md) Meta Platforms WhatsApp: Meta Platforms WhatsApp Incorrect Authorization Vulnerability (due 2025-09-23; ransomware: Unknown)
- 2025-09-02 [CVE-2020-24363](https://erroneo.us/security/cve/CVE-2020-24363/index.md) TP-Link TL-WA855RE: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability (due 2025-09-23; ransomware: Unknown)
- 2025-08-29 [CVE-2025-57819](https://erroneo.us/security/cve/CVE-2025-57819/index.md) Sangoma FreePBX: Sangoma FreePBX Authentication Bypass Vulnerability (due 2025-09-19; ransomware: Unknown)
- 2025-08-26 [CVE-2025-7775](https://erroneo.us/security/cve/CVE-2025-7775/index.md) Citrix NetScaler: Citrix NetScaler Memory Overflow Vulnerability (due 2025-08-28; ransomware: Unknown)
- 2025-08-25 [CVE-2025-48384](https://erroneo.us/security/cve/CVE-2025-48384/index.md) Git Git: Git Link Following Vulnerability (due 2025-09-15; ransomware: Unknown)
- 2025-08-25 [CVE-2024-8069](https://erroneo.us/security/cve/CVE-2024-8069/index.md) Citrix Session Recording: Citrix Session Recording Deserialization of Untrusted Data Vulnerability (due 2025-09-15; ransomware: Unknown)
- 2025-08-25 [CVE-2024-8068](https://erroneo.us/security/cve/CVE-2024-8068/index.md) Citrix Session Recording: Citrix Session Recording Improper Privilege Management Vulnerability (due 2025-09-15; ransomware: Unknown)
- 2025-08-21 [CVE-2025-43300](https://erroneo.us/security/cve/CVE-2025-43300/index.md) Apple iOS, iPadOS, and macOS: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (due 2025-09-11; ransomware: Unknown)
- 2025-08-18 [CVE-2025-54948](https://erroneo.us/security/cve/CVE-2025-54948/index.md) Trend Micro Apex One: Trend Micro Apex One OS Command Injection Vulnerability (due 2025-09-08; ransomware: Unknown)
- 2025-08-13 [CVE-2025-8876](https://erroneo.us/security/cve/CVE-2025-8876/index.md) N-able N-Central: N-able N-Central Command Injection Vulnerability (due 2025-08-20; ransomware: Unknown)
- 2025-08-13 [CVE-2025-8875](https://erroneo.us/security/cve/CVE-2025-8875/index.md) N-able N-Central: N-able N-Central Insecure Deserialization Vulnerability (due 2025-08-20; ransomware: Unknown)
- 2025-08-12 [CVE-2025-8088](https://erroneo.us/security/cve/CVE-2025-8088/index.md) RARLAB WinRAR: RARLAB WinRAR Path Traversal Vulnerability (due 2025-09-02; ransomware: Known)
- 2025-08-12 [CVE-2013-3893](https://erroneo.us/security/cve/CVE-2013-3893/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Resource Management Errors Vulnerability (due 2025-09-02; ransomware: Unknown)
- 2025-08-12 [CVE-2007-0671](https://erroneo.us/security/cve/CVE-2007-0671/index.md) Microsoft Office: Microsoft Office Excel Remote Code Execution Vulnerability (due 2025-09-02; ransomware: Unknown)
- 2025-08-05 [CVE-2022-40799](https://erroneo.us/security/cve/CVE-2022-40799/index.md) D-Link DNR-322L: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-08-05 [CVE-2020-25079](https://erroneo.us/security/cve/CVE-2020-25079/index.md) D-Link DCS-2530L and DCS-2670L Devices: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-08-05 [CVE-2020-25078](https://erroneo.us/security/cve/CVE-2020-25078/index.md) D-Link DCS-2530L and DCS-2670L Devices: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability (due 2025-08-26; ransomware: Unknown)
- 2025-07-28 [CVE-2025-20337](https://erroneo.us/security/cve/CVE-2025-20337/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Injection Vulnerability (due 2025-08-18; ransomware: Unknown)
- 2025-07-28 [CVE-2025-20281](https://erroneo.us/security/cve/CVE-2025-20281/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Injection Vulnerability (due 2025-08-18; ransomware: Unknown)
- 2025-07-28 [CVE-2023-2533](https://erroneo.us/security/cve/CVE-2023-2533/index.md) PaperCut NG/MF: PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability (due 2025-08-18; ransomware: Unknown)
- 2025-07-22 [CVE-2025-6558](https://erroneo.us/security/cve/CVE-2025-6558/index.md) Google Chromium: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2025-07-22 [CVE-2025-54309](https://erroneo.us/security/cve/CVE-2025-54309/index.md) CrushFTP CrushFTP:  CrushFTP Unprotected Alternate Channel Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2025-07-22 [CVE-2025-49706](https://erroneo.us/security/cve/CVE-2025-49706/index.md) Microsoft SharePoint: Microsoft SharePoint Improper Authentication Vulnerability (due 2025-07-23; ransomware: Known)
- 2025-07-22 [CVE-2025-49704](https://erroneo.us/security/cve/CVE-2025-49704/index.md) Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (due 2025-07-23; ransomware: Known)
- 2025-07-22 [CVE-2025-2776](https://erroneo.us/security/cve/CVE-2025-2776/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2025-07-22 [CVE-2025-2775](https://erroneo.us/security/cve/CVE-2025-2775/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2025-07-20 [CVE-2025-53770](https://erroneo.us/security/cve/CVE-2025-53770/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2025-07-21; ransomware: Known)
- 2025-07-18 [CVE-2025-25257](https://erroneo.us/security/cve/CVE-2025-25257/index.md) Fortinet FortiWeb: Fortinet FortiWeb SQL Injection Vulnerability (due 2025-08-08; ransomware: Unknown)
- 2025-07-14 [CVE-2025-47812](https://erroneo.us/security/cve/CVE-2025-47812/index.md) Wing FTP Server Wing FTP Server: Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability (due 2025-08-04; ransomware: Unknown)
- 2025-07-10 [CVE-2025-5777](https://erroneo.us/security/cve/CVE-2025-5777/index.md) Citrix NetScaler ADC and Gateway: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (due 2025-07-11; ransomware: Known)
- 2025-07-07 [CVE-2019-9621](https://erroneo.us/security/cve/CVE-2019-9621/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability (due 2025-07-28; ransomware: Unknown)
- 2025-07-07 [CVE-2019-5418](https://erroneo.us/security/cve/CVE-2019-5418/index.md) Rails Ruby on Rails: Rails Ruby on Rails Path Traversal Vulnerability (due 2025-07-28; ransomware: Unknown)
- 2025-07-07 [CVE-2016-10033](https://erroneo.us/security/cve/CVE-2016-10033/index.md) PHP PHPMailer: PHPMailer Command Injection Vulnerability (due 2025-07-28; ransomware: Unknown)
- 2025-07-07 [CVE-2014-3931](https://erroneo.us/security/cve/CVE-2014-3931/index.md) Looking Glass Multi-Router Looking Glass (MRLG): Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability (due 2025-07-28; ransomware: Unknown)
- 2025-07-02 [CVE-2025-6554](https://erroneo.us/security/cve/CVE-2025-6554/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2025-07-23; ransomware: Unknown)
- 2025-07-01 [CVE-2025-48928](https://erroneo.us/security/cve/CVE-2025-48928/index.md) TeleMessage TM SGNL: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability (due 2025-07-22; ransomware: Unknown)
- 2025-07-01 [CVE-2025-48927](https://erroneo.us/security/cve/CVE-2025-48927/index.md) TeleMessage TM SGNL: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability (due 2025-07-22; ransomware: Unknown)
- 2025-06-30 [CVE-2025-6543](https://erroneo.us/security/cve/CVE-2025-6543/index.md) Citrix NetScaler ADC and Gateway: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (due 2025-07-21; ransomware: Unknown)
- 2025-06-25 [CVE-2024-54085](https://erroneo.us/security/cve/CVE-2024-54085/index.md) AMI MegaRAC SPx: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability (due 2025-07-16; ransomware: Unknown)
- 2025-06-25 [CVE-2024-0769](https://erroneo.us/security/cve/CVE-2024-0769/index.md) D-Link DIR-859 Router:  D-Link DIR-859 Router Path Traversal Vulnerability (due 2025-07-16; ransomware: Unknown)
- 2025-06-25 [CVE-2019-6693](https://erroneo.us/security/cve/CVE-2019-6693/index.md) Fortinet FortiOS: Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability (due 2025-07-16; ransomware: Known)
- 2025-06-17 [CVE-2023-0386](https://erroneo.us/security/cve/CVE-2023-0386/index.md) Linux Kernel: Linux Kernel Improper Ownership Management Vulnerability (due 2025-07-08; ransomware: Unknown)
- 2025-06-16 [CVE-2025-43200](https://erroneo.us/security/cve/CVE-2025-43200/index.md) Apple Multiple Products: Apple Multiple Products Unspecified Vulnerability (due 2025-07-07; ransomware: Unknown)
- 2025-06-16 [CVE-2023-33538](https://erroneo.us/security/cve/CVE-2023-33538/index.md) TP-Link Multiple Routers: TP-Link Multiple Routers Command Injection Vulnerability (due 2025-07-07; ransomware: Unknown)
- 2025-06-10 [CVE-2025-33053](https://erroneo.us/security/cve/CVE-2025-33053/index.md) Microsoft Windows:  Microsoft Windows External Control of File Name or Path Vulnerability (due 2025-07-01; ransomware: Unknown)
- 2025-06-10 [CVE-2025-24016](https://erroneo.us/security/cve/CVE-2025-24016/index.md) Wazuh Wazuh Server: Wazuh Server Deserialization of Untrusted Data Vulnerability (due 2025-07-01; ransomware: Unknown)
- 2025-06-09 [CVE-2025-32433](https://erroneo.us/security/cve/CVE-2025-32433/index.md) Erlang Erlang/OTP: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (due 2025-06-30; ransomware: Unknown)
- 2025-06-09 [CVE-2024-42009](https://erroneo.us/security/cve/CVE-2024-42009/index.md) Roundcube Webmail: RoundCube Webmail Cross-Site Scripting Vulnerability (due 2025-06-30; ransomware: Unknown)
- 2025-06-05 [CVE-2025-5419](https://erroneo.us/security/cve/CVE-2025-5419/index.md) Google Chromium V8: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (due 2025-06-26; ransomware: Unknown)
- 2025-06-03 [CVE-2025-27038](https://erroneo.us/security/cve/CVE-2025-27038/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability (due 2025-06-24; ransomware: Unknown)
- 2025-06-03 [CVE-2025-21480](https://erroneo.us/security/cve/CVE-2025-21480/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (due 2025-06-24; ransomware: Unknown)
- 2025-06-03 [CVE-2025-21479](https://erroneo.us/security/cve/CVE-2025-21479/index.md) Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (due 2025-06-24; ransomware: Unknown)
- 2025-06-02 [CVE-2025-3935](https://erroneo.us/security/cve/CVE-2025-3935/index.md) ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Authentication Vulnerability (due 2025-06-23; ransomware: Unknown)
- 2025-06-02 [CVE-2025-35939](https://erroneo.us/security/cve/CVE-2025-35939/index.md) Craft CMS Craft CMS: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability (due 2025-06-23; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/4/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt