Week 20, 2025

12–18 May 2025

New CVEs: 1,127
Critical: 81
High: 408
Newly exploited: 9
Advisories: 680
Malicious pkgs: 227

Newly exploited 9

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.1
CVE-2025-42999 KEV May 15, 2025 · ransomware Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
SAP · SAP NetWeaver (Visual Composer development server)

EPSS 13%
High 7.3
CVE-2024-12987 KEV May 15, 2025 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
DrayTek · Vigor2960 · Vigor300B

EPSS 98%
Critical 9.6
CVE-2025-32756 KEV May 14, 2025 A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 …
Fortinet · FortiMail · FortiVoice · FortiRecorder

EPSS 31%
High 7.8
CVE-2025-32701 KEV May 13, 2025 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.4%
High 7.8
CVE-2025-32706 KEV May 13, 2025 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.3%
High 7.8
CVE-2025-30400 KEV May 13, 2025 Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.9%
High 7.8
CVE-2025-32709 KEV May 13, 2025 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.8%
High 7.5
CVE-2025-30397 KEV May 13, 2025 Scripting Engine Memory Corruption Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 27%
Low 1.9
CVE-2025-47729 KEV May 12, 2025 The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functio…
TeleMessage · archiving backend

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2025-47916 Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor contr…
invisioncommunity · Invision Power Board

EPSS 84%
Critical 10.0
CVE-2024-46506 NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authenticat…
NetAlertX · NetAlertX

EPSS 63%
Critical 9.1
CVE-2025-43562 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Adobe · ColdFusion

EPSS 51%
Critical 9.6
CVE-2025-32756 A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 …
Fortinet · FortiMail · FortiVoice · FortiRecorder

EPSS 31%
Critical 9.8
CVE-2025-4632 Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitr…
Samsung Electronics · MagicINFO 9 Server

EPSS 24%
Critical 9.1
CVE-2025-43561 ColdFusion | Incorrect Authorization (CWE-863)
Adobe · ColdFusion

EPSS 24%
Critical 9.1
CVE-2025-43560 ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion

EPSS 23%
Critical 9.1
CVE-2025-43564 ColdFusion | Incorrect Authorization (CWE-863)
Adobe · ColdFusion

EPSS 17%
Critical 9.1
CVE-2025-43563 ColdFusion | Improper Access Control (CWE-284)
Adobe · ColdFusion

EPSS 17%
Critical 9.1
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
SAP · SAP NetWeaver (Visual Composer development server)

EPSS 13%
Critical 9.8
CVE-2025-45858 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
EPSS 11%
Critical 9.8
CVE-2025-4918 Out-of-bounds access when resolving Promise objects
Mozilla · Firefox · Thunderbird

EPSS 9.5%
Critical 9.8
CVE-2025-45779 Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.
EPSS 6.8%
Critical 9.8
CVE-2024-6159 Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi
EPSS 2.8%
Critical 9.8
CVE-2025-22462 An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenti…
ivanti · Neurons for ITSM (on-prem)

EPSS 2.1%

All 81 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 5.3
CVE-2025-4427 Authentication Bypass
ivanti · Endpoint Manager Mobile

EPSS 100%
High 7.2
CVE-2025-4428 Remote Code Execution
ivanti · Endpoint Manager Mobile

EPSS 88%
Medium 4.3
CVE-2025-4901 D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure
D-Link · DI-7003GV2

EPSS 79%
High 7.5
CVE-2025-29971 Web Threat Defense (WTD.sys) Denial of Service Vulnerability
Microsoft · Windows 11 Version 24H2 · Windows 11 version 23H2 · Windows 11 version 22H2

EPSS 68%
High 8.6
CVE-2024-48766 NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos an…
NetAlertX · NetAlertX

EPSS 68%
Medium 6.8
CVE-2025-43566 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion

EPSS 58%
High 8.1
CVE-2025-3833 SQL Injection
ManageEngine · ADSelfService Plus

EPSS 51%
Low 2.7
CVE-2025-0133 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 46%

Advisories

RHSA-2025:6966 Red Hat Security Advisory: kernel security update 406 CVEs
USN-7514-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities 134 CVEs
USN-7515-1 linux-gke vulnerabilities 134 CVEs
USN-7513-2 linux-realtime vulnerabilities 133 CVEs
USN-7513-1 linux, linux-aws, linux-aws-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities 133 CVEs
USN-7512-1 linux-gcp-5.15 vulnerabilities 128 CVEs
USN-7511-2 linux-gcp-fips vulnerabilities 126 CVEs
USN-7511-1 linux-gcp vulnerabilities 126 CVEs
USN-7510-2 linux-fips vulnerabilities 124 CVEs
USN-7510-1 linux, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities 124 CVEs