CVEs published March 10 to March 16, 2025
769 CVEs were published Mar 10 to Mar 16, 2025, 51 of them critical. CISA added 13 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 769
- Critical
- 51
- Added to CISA KEV
- 13
- Busiest day
- Tue, Mar 11 (332)
- Quietest day
- Sun, Mar 16 (33)
- March 10, 202583 CVEs · 7 critical
- March 11, 2025332 CVEs · 7 critical
- March 12, 2025101 CVEs · 13 critical
- March 13, 202590 CVEs · 2 critical
- March 14, 202586 CVEs · 19 critical
- March 15, 202544 CVEs · 2 critical
- March 16, 202533 CVEs · 1 critical
Added to CISA KEV 13
- CVE-2024-13159Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-13160Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-13161Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-57968Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessibleAdvantive VeraCore
- CVE-2025-25181A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL Advantive VeraCore
- CVE-2025-24983Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24984Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24985Windows Fast FAT File System Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24991Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24993Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-26633Microsoft Management Console Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21590Junos OS: An local attacker with shell access can execute arbitrary codeJuniper Networks Junos OS
- CVE-2025-24201An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.Apple Safari · Apple iOS and iPadOS +4