Week 5, 2025
27 January to 2 February 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 762CVEs publishedin the whole week
- 65CriticalCVSS 9.0 and above
- 234HighCVSS 7.0 to 8.9
- 1Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2025-24085
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…
Apple · iOS and iPadOS
ExploitedCritical10.0
Most severe new CVEsBy CVSS score
- CVE-2025-24085
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…
Apple · iOS and iPadOS
ExploitedCritical10.0 - CVE-2024-48841
Remote Code Execution (RCE) Vulnerabilities
ABB · FLXEON
Critical10.0 - CVE-2025-23211
Tandoor Recipes - SSTI - Remote Code Execution
TandoorRecipes · recipes
Critical10.0 - CVE-2025-21415
Azure AI Face Service Elevation of Privilege Vulnerability
Microsoft · Azure AI Face Service
Critical9.9 - CVE-2024-53584
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
Product not named
Critical9.8 - CVE-2025-24118
The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to…
Apple · iPadOS
Critical9.8 - CVE-2022-3365
Emote Interactive Remote Mouse Server command injection due to weak encoding
Emote Interactive · Remote Mouse Server
Critical9.8 - CVE-2025-24126
An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS…
Apple · iOS and iPadOS
Critical9.8 - CVE-2024-12649
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
Canon Inc. · Satera MF656Cdw
Critical9.8 - CVE-2024-12647
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…
Canon Inc. · Satera MF656Cdw
Critical9.8