Week 20, 2025
12 May to 18 May 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 1,118CVEs publishedin the whole week
- 77CriticalCVSS 9.0 and above
- 321HighCVSS 7.0 to 8.9
- 9Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2025-42999
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
SAP_SE · SAP NetWeaver (Visual Composer development server)
ExploitedCritical9.1 - CVE-2024-12987
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
DrayTek · Vigor2960
ExploitedMedium6.9 - CVE-2025-32756
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…
Fortinet · FortiNDR
ExploitedCritical9.6 - CVE-2025-32709
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2025-32701
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2025-30400
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8 - CVE-2025-30397
Scripting Engine Memory Corruption Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.5 - CVE-2025-47729
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different…
TeleMessage · archiving backend
ExploitedLow1.9
Most severe new CVEsBy CVSS score
- CVE-2025-47916
Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor…
invisioncommunity · Invision Power Board
Critical10.0 - CVE-2024-46506
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an…
NetAlertX · NetAlertX
Critical10.0 - CVE-2025-26389
A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the…
Siemens · OZW672
Critical10.0 - CVE-2025-30012
Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
SAP_SE · SAP Supplier Relationship Management (Live Auction Cockpit)
Critical10.0 - CVE-2025-4632
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write…
Samsung Electronics · MagicINFO 9 Server
ExploitedCritical9.8 - CVE-2025-45858
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
Product not named
Critical9.8 - CVE-2025-4918
Out-of-bounds access when resolving Promise objects
Mozilla · Firefox
Critical9.8 - CVE-2025-45779
Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.
Product not named
Critical9.8 - CVE-2024-6159
Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi
Unknown · Push Notification for Post and BuddyPress
Critical9.8 - CVE-2025-22462
An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote…
Ivanti · Neurons for ITSM (on-prem)
Critical9.8