Week 33, 2025
11 August to 17 August 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 1,095
- Critical
- 86
- High
- 419
- Added to KEV
- 5
Critical 86High 419Medium 553Low 37Not scored 0All 1,095 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2025-8875
Insecure Deserialization Vulnerability
N-able · N-central
ExploitedCritical9.4 - CVE-2025-8876
Command Injection Vulnerability
N-able · N-central
ExploitedCritical9.4 - CVE-2013-3893
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute…
Product not named
ExploitedHigh8.8 - CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to…
Product not named
ExploitedHigh8.8 - CVE-2025-8088
Path traversal vulnerability in WinRAR
win.rar GmbH · WinRAR
ExploitedHigh8.4
Most severe new CVEsBy CVSS score
- CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
Cisco · Cisco Firepower Management Center
Critical10.0 - CVE-2011-10019
Spreecommerce < 0.60.2 Search Parameter RCE
Spreecommerce · Spreecommerce
Critical10.0 - CVE-2011-10018
myBB 1.6.4 Backdoor Arbitrary Command Execution
myBB Group · Forum Software
Critical10.0 - CVE-2011-10017
Snort Report nmap.php/nbtscan.php RCE
Symmetrix Technologies · Snort Report
Critical10.0 - CVE-2011-10011
WeBid 1.0.2 converter.php Remote PHP Code Injection
WeBid · WeBid
Critical10.0 - CVE-2011-10013
Traq 2.0–2.3 admincp/common.php RCE
Traq Project · Issue Tracking System
Critical10.0 - CVE-2012-10058
RabidHamster R4 Log Entry sprintf() Buffer Overflow
RabidHamster · R4 Embedded Server
Critical10.0 - CVE-2025-55169
WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-34153
Hyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE
Hyland Software · OnBase
Critical10.0 - CVE-2025-25174
WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability
beeteam368 · BeeTeam368 Extensions
Critical10.0