2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15463 | MEDIUM | 6.5 | 0.4% | May 12, 2026 | The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all vers... |
| CVE-2025-65088 | HIGH | 7.8 | 0.2% | May 12, 2026 | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions... |
| CVE-2025-65087 | HIGH | 7.8 | 0.2% | May 12, 2026 | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions... |
| CVE-2025-65086 | HIGH | 7.8 | 0.2% | May 12, 2026 | An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share version... |
| CVE-2025-67604 | MEDIUM | 5.3 | 0.4% | May 12, 2026 | A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0... |
| CVE-2025-53870 | MEDIUM | 6.7 | 0.6% | May 12, 2026 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet ... |
| CVE-2025-53844 | HIGH | 8.8 | 0.6% | May 12, 2026 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 ... |
| CVE-2025-53681 | HIGH | 7.2 | 0.4% | May 12, 2026 | An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerab... |
| CVE-2025-53680 | MEDIUM | 6.7 | 0.6% | May 12, 2026 | An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vul... |
| CVE-2025-46311 | HIGH | 7.5 | 0.2% | May 12, 2026 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and... |
| CVE-2025-43524 | HIGH | 8.8 | 0.1% | May 12, 2026 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS S... |
| CVE-2025-65719 | CRITICAL | 9.8 | 0.6% | May 12, 2026 | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user... |
| CVE-2025-36515 | MEDIUM | 5.4 | 0.1% | May 12, 2026 | Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may... |
| CVE-2025-36510 | MEDIUM | 6.8 | 0.1% | May 12, 2026 | Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Driver... |
| CVE-2025-35991 | MEDIUM | 5.6 | 0.1% | May 12, 2026 | Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an informat... |
| CVE-2025-35990 | HIGH | 8.8 | 0.2% | May 12, 2026 | Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring ... |
| CVE-2025-35979 | MEDIUM | 6.8 | 0.1% | May 12, 2026 | Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio... |
| CVE-2025-35969 | MEDIUM | 5.4 | 0.1% | May 12, 2026 | Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3... |
| CVE-2025-27723 | MEDIUM | 6.8 | 0.1% | May 12, 2026 | Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Ke... |
| CVE-2025-70842 | MEDIUM | 5.4 | 0.1% | May 12, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The f... |
| CVE-2025-12659 | HIGH | 7.8 | 0.2% | May 12, 2026 | Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could... |
| CVE-2025-6577 | CRITICAL | 9.8 | 0.3% | May 12, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce So... |
| CVE-2025-40949 | CRITICAL | 9.1 | 0.5% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |
| CVE-2025-40948 | MEDIUM | 6.8 | 0.3% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |
| CVE-2025-40947 | HIGH | 7.7 | 0.4% | May 12, 2026 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versio... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now