CVEs published May 12 to May 18, 2025
1,118 CVEs were published May 12 to May 18, 2025, 78 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,118
- Critical
- 78
- Added to CISA KEV
- 9
- Busiest day
- Tue, May 13 (312)
- Quietest day
- Sat, May 17 (47)
- May 12, 2025125 CVEs · 16 critical
- May 13, 2025312 CVEs · 30 critical
- May 14, 2025105 CVEs · 12 critical
- May 15, 2025306 CVEs · 11 critical
- May 16, 2025172 CVEs · 4 critical
- May 17, 202547 CVEs · 5 critical
- May 18, 202551 CVEs
Added to CISA KEV 9
- CVE-2025-47729The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which iTeleMessage archiving backend
- CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32756A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionFortinet FortiNDR · Fortinet FortiCamera +3
- CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injectionDrayTek Vigor2960 · DrayTek Vigor300B
- CVE-2025-42999Insecure Deserialization in SAP NetWeaver (Visual Composer development server)SAP_SE SAP NetWeaver