CVEs published May 5 to May 11, 2025
923 CVEs were published May 5 to May 11, 2025, 79 of them critical. CISA added 4 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 923
- Critical
- 79
- Added to CISA KEV
- 4
- Busiest day
- Wed, May 7 (305)
- Quietest day
- Sun, May 11 (28)
- May 5, 2025127 CVEs · 16 critical
- May 6, 2025166 CVEs · 16 critical
- May 7, 2025305 CVEs · 11 critical
- May 8, 2025112 CVEs · 12 critical
- May 9, 2025152 CVEs · 24 critical
- May 10, 202533 CVEs
- May 11, 202528 CVEs
Added to CISA KEV 4
- CVE-2025-3248Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/codelangflow-ai langflow · langflow +1
- CVE-2025-27363An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parseFreeType
- CVE-2024-11120GeoVision EOL devices - OS Command InjectionGeoVision GV-VS12 · GeoVision GV-VS11 +2
- CVE-2024-6047GeoVision EOL device - OS Command InjectionGeoVision GV_DSP_LPR_V2 · GeoVision GV_IPCAMD_GV_BX1500 +17