CISA Known Exploited Vulnerabilities
KEV additions — April 2025
15 CVEs entered the KEV catalog in April 2025.
Added April 29, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-31324ransomware | SAP NetWeaver Unrestricted File Upload Vulnerability | 9.8 | 41.7 % | May 20, 2025 |
Added April 28, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability | 6.7 | 1.1 % | May 19, 2025 |
| CVE-2025-3928 | Commvault Web Server Unspecified Vulnerability | 8.8 | 18.1 % | May 19, 2025 |
| CVE-2025-42599 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 9.8 | 8.0 % | May 19, 2025 |
Added April 17, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 5.4 | 11.9 % | May 8, 2025 |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | 9.8 | 1.7 % | May 8, 2025 |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | 9.8 | 5.7 % | May 8, 2025 |
Added April 16, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 6.5 | 4.0 % | May 7, 2025 |
Added April 9, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-53150 | Linux Kernel Out-of-Bounds Read Vulnerability | 7.1 | 1.0 % | April 30, 2025 |
| CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability | 7.8 | 1.6 % | April 30, 2025 |
Added April 8, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-29824ransomware | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 7.8 | 0.5 % | April 29, 2025 |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 9.8 | 87.9 % | April 29, 2025 |
Added April 7, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-31161ransomware | CrushFTP Authentication Bypass Vulnerability | 9.8 | 88.0 % | April 28, 2025 |
Added April 4, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-22457ransomware | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 9.8 | 55.5 % | April 11, 2025 |
Added April 1, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability | 9.8 | 94.2 % | April 22, 2025 |