Known exploited vulnerabilities

Attackers can take control of vulnerable FortiWeb security appliances from the network unless they are updated or tightly restricted

A flaw in Windows can let someone who already got limited access to a computer turn that access into full control, so affected systems should be updated quickly

Attackers can reopen a Triofox setup screen that should be closed and use it to take control of the file-sharing system

Attackers can take over certain WatchGuard firewall VPN systems remotely, so exposed devices need urgent updating and review

Some Samsung phones can be taken over by a malicious image unless they are updated to the April 2025 security release or later

Attackers can remotely read sensitive files from affected file-sharing servers without signing in, which may expose information needed to break in further

Attackers can take over vulnerable web hosting control panels remotely if they know a valid username, so exposed systems must be updated or isolated immediately

A person who already has limited access to an affected virtual machine may be able to turn that into full control of the machine

XWiki Platform allows remote code execution as guest via SolrSearchMacros request

An attacker can take over a vulnerable XWiki site without logging in by sending a specially crafted search request

A flaw in DELMIA Apriso can let an attacker gain powerful access to the application and potentially alter manufacturing operations or sensitive production data

A flaw in DELMIA Apriso can let attackers take control of the server that supports manufacturing operations, so affected systems should be updated and checked…

Attackers can remotely take over a vulnerable Windows update server and potentially use it to spread malware or move deeper into the organization

Attackers can remotely hijack sessions in affected online store software and act as legitimate users or administrators unless the systems are updated and…

Attackers can take control of computers running vulnerable Lanscope endpoint software by sending malicious network messages, so affected systems should be…

A flaw in Oracle E-Business Suite can let outsiders access sensitive business data over the web without signing in, and it is already being used by attackers

A Windows file-sharing weakness can let an attacker turn limited access into much higher privileges if systems are not updated and network authentication is…

A flaw in Kentico Xperience can let outsiders make administrator-level website changes without signing in. CVE-2025-2747 is rated critical (CVSS 9.8) and is…

Attackers can break into vulnerable Kentico-powered websites through a faulty synchronization login and change important website settings or content without…

A malicious website or link could let attackers take control of an unpatched Apple device or browser, so affected systems should be updated promptly

Attackers can remotely take over vulnerable Adobe Experience Manager servers unless they are urgently updated or isolated

A person who already has basic access to a Windows computer may be able to take full control of it unless the latest Microsoft security updates are installed

A vulnerable old Windows modem driver can let an attacker who already got onto a computer take full control of it, and Microsoft’s fix removes that driver

Some IGEL endpoint systems can be tricked into starting from untrusted software, which could let an attacker take deep control of the device

An old version of management software lets outsiders take full control of computers over the network without needing any password

A malicious calendar invite can let an attacker take actions inside a victim’s Zimbra mailbox, including secretly forwarding their email

Attackers can break into vulnerable Oracle business application servers over the web without a password, potentially stealing sensitive company data or…

An attacker who already gets limited access to a Windows computer can use this flaw to take full control of it unless the system is updated

A flaw in older Windows computers lets attackers take over machines simply by getting users to visit a bad website using Internet Explorer

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003…

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading…

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when…

Attackers can compromise unpatched Samsung phones by sending specially crafted media that the phone tries to open or preview

A flaw in Meteobridge devices can let an internet attacker take complete control of the device without needing a password

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b…

A long-standing flaw in the widely used command shell lets attackers run their own programs on servers by sending specially formatted text through normal…

Attackers with network management credentials can crash vulnerable Cisco network devices and, in some cases, take full control of them

A malicious email attachment can make the email security gateway run attacker commands, potentially letting attackers take control of the device before anyone…

Attackers can exploit a flaw in a file-transfer product to take control of the server, steal files, and potentially deploy ransomware

A flaw in a common administrator tool can let someone with basic access to a machine take complete control of it unless the tool is updated

Attackers can reach protected VPN functions on vulnerable Cisco firewalls without logging in and may be able to crash the device, disrupting remote access and…

Attackers with valid VPN logins can take control of vulnerable Cisco firewall VPN devices, potentially giving them a foothold into the organization’s network

A malicious website could compromise an outdated Chrome browser and let attackers steal data or take further control of the user’s device

A flaw in affected DELMIA Apriso systems can let attackers take control of the server and disrupt or manipulate manufacturing operations if it is not fixed

Attackers can take over outdated Sitecore website servers by sending specially crafted web requests, so affected systems should be upgraded or isolated…

A flaw in some Linux systems can let someone who already gets limited access take over the machine or crash it, so affected systems need a kernel update and…

Attackers with access to the router’s admin page can take control of certain older TP-Link routers, so affected devices should be replaced or updated urgently

Attackers on the same network may be able to read saved router passwords without logging in, letting them take control of the router or use it to reach other…

Attackers may have abused a WhatsApp flaw on Apple devices to make targeted phones or Macs open malicious content and enable spyware-style compromise

Attackers connected to the same Wi-Fi network can reset this extender and then set their own password to take it over completely

An exposed phone-system admin portal can be taken over without a password, allowing attackers to change call settings, steal information, or run commands on…