Week 10, 2025

3–9 March 2025

New CVEs: 958
Critical: 103
High: 380
Newly exploited: 9
Advisories: 185
Malicious pkgs: 527

Newly exploited 9

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.3
CVE-2025-22224 KEV Mar 4, 2025 VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local admi…
VMware · Workstation · ESXi · Telco Cloud Platform

EPSS 1.6%
High 8.2
CVE-2025-22225 KEV Mar 4, 2025 · ransomware VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading t…
EPSS 1%
High 7.1
CVE-2025-22226 KEV Mar 4, 2025 VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrativ…
EPSS 1.6%
Medium 5.5
CVE-2024-50302 KEV Mar 4, 2025 HID: core: zero-initialize the report buffer
Linux · Linux
Critical 9.8
CVE-2024-4885 KEV Mar 3, 2025 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
Progress Software · WhatsUp Gold

EPSS 99%
High 8.8
CVE-2022-43769 KEV Mar 3, 2025 Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Hitachi Vantara · Pentaho Business Analytics Server

EPSS 98%
High 8.6
CVE-2022-43939 KEV Mar 3, 2025 Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Hitachi Vantara · Pentaho Business Analytics Server

EPSS 92%
High 8.4
CVE-2018-8639 KEV Mar 3, 2025 · ransomware An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…
Microsoft · Windows Server 2019 · Windows Server 2016 · Windows Server 2012 R2

EPSS 22%
Medium 6.5
CVE-2023-20118 KEV Mar 3, 2025 A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an auth…
Cisco · Cisco Small Business RV Series Router Firmware

EPSS 54%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
Edimax · IC-7100 IP Camera

EPSS 74%
Critical 9.8
CVE-2025-26319 FlowiseAI Flowise arbitrary file upload vulnerability
EPSS 56%
Critical 9.0
CVE-2025-27590 Oxidized Web RANCID migration page allows unauthenticated user to gain control over Linux user account
Oxidized Web project · Oxidized Web

EPSS 28%
Critical 9.1
CVE-2025-25948 Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 al…
EPSS 6.9%
Critical 9.8
CVE-2025-1307 Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload
spicethemes · Newscrunch

EPSS 2.2%
Critical 9.8
CVE-2025-25632 Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.
EPSS 1.7%
Critical 9.8
CVE-2025-27657 Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008.
EPSS 1.7%
Critical 9.3
CVE-2025-22224 VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local admi…
VMware · Workstation · ESXi · Telco Cloud Platform

EPSS 1.6%
Critical 9.8
CVE-2025-0912 GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection
stellarwp · GiveWP – Donation Plugin and Fundraising Platform

EPSS 1.4%
Critical 9.3
CVE-2025-27519 Cognita Arbitrary File Write
truefoundry · cognita

EPSS 1.4%
Critical 9.9
CVE-2025-25015 Kibana arbitrary code execution via prototype pollution
Elastic · Kibana

EPSS 1.3%
Critical 9.8
CVE-2025-27678 Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.
EPSS 1.3%
Critical 9.8
CVE-2024-42733 An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input
EPSS 1.1%
Critical 9.8
CVE-2025-27647 Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication…
EPSS 1%
Critical 10.0
CVE-2024-50704 Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially craf…

All 103 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 5.6
CVE-2025-27636 Apache Camel: Camel Message Header Injection via Improper Filtering
Apache Software Foundation · Apache Camel

EPSS 97%
High 8.6
CVE-2024-48248 NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code …
NAKIVO · Backup & Replication Director

EPSS 94%
Medium 6.4
CVE-2025-0370 WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter
gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

EPSS 37%
High 7.1
CVE-2025-27423 Improper Input Validation in Vim
vim · vim

EPSS 22%
Medium 6.3
CVE-2025-2094 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection
Toto Link · EX1800T

EPSS 13%
Medium 6.3
CVE-2025-2126 JoomlaUX JUX Real Estate GET Parameter realties sql injection
JoomlaUX · JUX Real Estate

EPSS 11%
High 8.8
CVE-2025-2097 TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow
Toto Link · EX1800T

EPSS 7.2%
High 7.8
CVE-2024-12742 Deserialization of Untrusted Data Vulnerability in NI G Web Development Software
NI · G Web Development Software

EPSS 5.5%

Advisories

USN-7303-3 linux-gcp-6.8, linux-raspi vulnerabilities 208 CVEs
USN-7294-4 linux-kvm vulnerabilities 144 CVEs
USN-7331-1 linux-hwe-5.15 vulnerabilities 105 CVEs
SUSE-SU-2025:0784-1 Security update for the Linux Kernel 44 CVEs
USN-7332-1 linux, linux-aws vulnerabilities 36 CVEs
SUSE-SU-2025:0771-1 Security update for the Linux Kernel 16 CVEs
openSUSE-SU-2025:14861-1 MozillaFirefox-136.0-1.1 on GA media 15 CVEs
USN-7334-1 firefox vulnerabilities 8 CVEs
USN-7318-1 spip vulnerabilities 8 CVEs
ICSA-25-063-07 GMOD Apollo 4 CVEs