Skip to content
OpenAdvisories

Archive

January 2025

Vulnerabilities first published in this month (UTC), newest first.

← December 2024 2025 / January February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.0
    CVE-2025-0411 Exploited Public exploit EPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

    7-Zip 7-Zip
    KEV Feb 6, 2025
  • High 8.1
    CVE-2025-23209 Exploited EPSS 22%

    Potential RCE with a compromised security key in craft/cms

    Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running…

    craftcms cms craftcms/cms Packagist
    KEV Feb 20, 2025
  • High 7.2
    CVE-2024-57728 Exploited · Ransomware Scanner template EPSS 64%

    SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file …

    KEV Apr 24, 2026
  • High 7.8
    CVE-2025-21334 Exploited

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • High 7.8
    CVE-2025-21333 Exploited Public exploit EPSS 10%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • High 7.8
    CVE-2025-21335 Exploited

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • High 8.2
    CVE-2024-53704 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…

    SonicWall SonicOS Network devices
    KEV Feb 18, 2025