Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2025-38352 | GoogleGoogle Android | Race condition in Linux kernel | CWE-362 | CISA KEVENISA KEV | |
| CVE-2025-55177 | WhatsAppWhatsApp for Mac | Improper authorization in WhatsApp products | CWE-285 | CISA KEVENISA KEV | |
| CVE-2025-57819 | FreePBXFreePBX | SQL injection in FreePBX | CWE-89 | CISA KEVENISA KEV | |
| CVE-2025-7775 | CitrixCitrix Netscaler ADC, Citrix NetScaler Gateway | Buffer overflow in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-119 | CISA KEVENISA KEV | |
| CVE-2025-43300 | Apple Inc.Apple iOS | Out-of-bounds write in Apple iOS and iPadOS | CWE-787 | CISA KEVENISA KEV | |
| CVE-2025-54948 | Trend MicroApex One | OS Command Injection in Apex One | CWE-78 | CISA KEVENISA KEV | |
| CVE-2025-8088 | RARLABWinRAR | Path traversal in WinRAR | CWE-22 | CISA KEVENISA KEV | |
| CVE-2025-53770 | MicrosoftMicrosoft SharePoint Server | Deserialization of Untrusted Data in Microsoft SharePoint Server | CWE-502 | CISA KEVENISA KEV | |
| CVE-2025-54313 | Prettiereslint-config-prettier | Embedded malicious code (backdoor) in eslint-config-prettier | CWE-506 | CISA KEV | |
| CVE-2025-6558 | GoogleGoogle Chrome | Input validation error in Google Chromium | CWE-20 | CISA KEVENISA KEV | |
| CVE-2025-6554 | GoogleGoogle Chrome | Type confusion in Google Chromium | CWE-843 | CISA KEVENISA KEV | |
| CVE-2025-6543 | CitrixCitrix NetScaler Gateway | Buffer overflow in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-119 | CISA KEVENISA KEV | |
| CVE-2025-33053 | MicrosoftMicrosoft Internet Explorer | External Control of File Name or Path in Microsoft products | CWE-73 | CISA KEVENISA KEV | |
| CVE-2025-5419 | GoogleGoogle Chrome | Out-of-bounds write in Google Chromium | CWE-787 | CISA KEVENISA KEV | |
| CVE-2025-27038 | QualcommFirmware | Use After Free in Qualcomm products | CWE-416 | CISA KEVENISA KEV | |
| CVE-2025-21480 | QualcommFirmware | Incorrect Authorization in Qualcomm products | CWE-863 | CISA KEVENISA KEV | |
| CVE-2025-21479 | QualcommFirmware | Incorrect Authorization in Qualcomm products | CWE-863 | CISA KEVENISA KEV | |
| CVE-2025-4664 | GoogleGoogle Chrome | Permissions, Privileges, and Access Controls in Google Chromium | CWE-264 | CISA KEVENISA KEV | |
| CVE-2025-4428 | IvantiEndpoint Manager Mobile (formerly MobileIron Core) | Code Injection in Endpoint Manager Mobile (formerly MobileIron Core) | CWE-94 | CISA KEVENISA KEV | |
| CVE-2025-32756 | Fortinet, IncFortiVoice | Stack-based buffer overflow in Fortinet, Inc products | CWE-121 | CISA KEVENISA KEV |
Showing 101–120 of 688 results