Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

2.7

LOW

CVE-2025-62479

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to c...

Affected Products : zfs_storage_appliance_kit
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
8.2

HIGH

CVE-2025-62588

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
8.2

HIGH

CVE-2025-62587

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
8.2

HIGH

CVE-2025-62590

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
8.2

HIGH

CVE-2025-62589

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
6.0

MEDIUM

CVE-2025-62591

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
6.0

MEDIUM

CVE-2025-62592

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
8.2

HIGH

CVE-2025-62641

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wh...

Affected Products : vm_virtualbox
Published: Oct. 21, 2025

Modified: Oct. 23, 2025
6.3

MEDIUM

CVE-2025-48813

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
9.9

CRITICAL

CVE-2025-49708

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +2 more products
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
7.8

HIGH

CVE-2025-50152

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
7.0

HIGH

CVE-2025-50174

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
7.7

HIGH

CVE-2025-53139

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
7.5

HIGH

CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input....

Affected Products : ac6_firmware ac6
Published: Oct. 22, 2025

Modified: Oct. 23, 2025

Vuln Type: Denial of Service
7.3

HIGH

CVE-2025-55247

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally....

Affected Products : linux_kernel .net
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
5.7

MEDIUM

CVE-2025-55248

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 linux_kernel .net_framework windows_server_2019 macos windows_10_1607 windows_10_1809 windows_10_21h2 +10 more products
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
5.5

MEDIUM

CVE-2025-55325

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 23, 2025
5.3

MEDIUM

CVE-2025-7473

Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection....

Affected Products : manageengine_endpoint_central
Published: Oct. 21, 2025

Modified: Oct. 23, 2025

Vuln Type: Injection
10.0

CRITICAL

CVE-2018-25118

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end...

Affected Products :
Published: Oct. 20, 2025

Modified: Oct. 23, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-9428

Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api....

Affected Products : manageengine_analytics_plus
Published: Oct. 21, 2025

Modified: Oct. 23, 2025

Vuln Type: Injection

Showing 20 of 4113 Results

Browse by Apps

Latest CVE Feed

2.7

8.2

8.2

8.2

8.2

6.0

6.0

8.2

6.3

9.9

7.8

7.0

7.7

7.5

7.3

5.7

5.5

5.3

10.0

8.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable