Week 46, 2025
10 November to 16 November 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 952
- Critical
- 48
- High
- 329
- Added to KEV
- 5
Critical 48High 329Medium 476Low 45Not scored 54All 952 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2025-64446
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0…
Fortinet · FortiWeb
ExploitedCritical9.4 - CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
WatchGuard · Fireware OS
ExploitedCritical9.3 - CVE-2025-12480
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is…
TrioFox · TrioFox
ExploitedCritical9.1 - CVE-2025-62215
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.0 - CVE-2025-21042
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
Samsung Mobile · Samsung Mobile Devices
ExploitedHigh8.8
Most severe new CVEsBy CVSS score
- CVE-2025-12539
TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover
leopardhost · TNC Toolbox: Web Performance
Critical10.0 - CVE-2025-42890
Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)
SAP_SE · SQL Anywhere Monitor (Non-Gui)
Critical10.0 - CVE-2025-36250
AIX Code Execution
IBM · AIX
Critical10.0 - CVE-2025-11367
N-central windows software probe Remote Code Execution
N-able · N-central
Critical10.0 - CVE-2025-54339
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for…
Product not named
Critical10.0 - CVE-2025-42887
Code Injection vulnerability in SAP Solution Manager
SAP_SE · SAP Solution Manager
Critical9.9 - CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.
Avast · (Free/Premiium/Ultimeat) Antivirus
Critical9.9 - CVE-2025-60724
GDI+ Remote Code Execution Vulnerability
Microsoft · Microsoft Office for Android
Critical9.8 - CVE-2025-8324
SQL Injection
Zohocorp · ManageEngine Analytics Plus
Critical9.8 - CVE-2025-63353
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the…
Product not named
Critical9.8