CVEs published April 7 to April 13, 2025
975 CVEs were published Apr 7 to Apr 13, 2025, 66 of them critical. CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 975
- Critical
- 66
- Added to CISA KEV
- 5
- Busiest day
- Tue, Apr 8 (347)
- Quietest day
- Sat, Apr 12 (15)
- April 7, 2025169 CVEs · 10 critical
- April 8, 2025347 CVEs · 21 critical
- April 9, 2025194 CVEs · 13 critical
- April 10, 2025108 CVEs · 9 critical
- April 11, 2025127 CVEs · 13 critical
- April 12, 202515 CVEs
- April 13, 202515 CVEs
Added to CISA KEV 5
- CVE-2025-31161CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy…CrushFTP
- CVE-2025-29824Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30406Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'Gladinet CentreStack
- CVE-2024-53150ALSA: usb-audio: Fix out of bounds reads when finding clock sourcesLinux
- CVE-2024-53197ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesLinux