September 2025

5 results · Clear filters · Feed

• High 7.8
  CVE-2025-41244 Exploited Public exploit EPSS 16%

  VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

  VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

  VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu Azure Linux
  Sep 29, 2025

  KEV Oct 30, 2025
• High 7.7
  CVE-2025-20352 Exploited Public exploit EPSS 41%

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

  Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices
  Sep 24, 2025

  KEV Sep 29, 2025
• High 8.8
  CVE-2025-10585 Exploited Public exploit

  Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi
  Sep 24, 2025

  KEV Sep 23, 2025
• High 8.8
  CVE-2025-21042 Exploited Public exploit EPSS 36%

  Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitr…

  Samsung Mobile Samsung Mobile Devices
  Sep 12, 2025

  KEV Nov 10, 2025
• High 8.8
  CVE-2025-48543 Exploited Public exploit

  In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use af…

  Google Android Android
  Sep 4, 2025

  KEV Sep 4, 2025