CVEs published July 21 to July 27, 2025
828 CVEs were published Jul 21 to Jul 27, 2025, 90 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 828
- Critical
- 90
- Added to CISA KEV
- 6
- Busiest day
- Mon, Jul 21 (232)
- Quietest day
- Sun, Jul 27 (41)
- July 21, 2025232 CVEs · 23 critical
- July 22, 2025119 CVEs · 12 critical
- July 23, 202594 CVEs · 21 critical
- July 24, 202578 CVEs · 14 critical
- July 25, 2025219 CVEs · 17 critical
- July 26, 202545 CVEs · 3 critical
- July 27, 202541 CVEs
Added to CISA KEV 6
- CVE-2025-2775SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity InjectionSysAid On-Prem
- CVE-2025-2776SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity InjectionSysAid On-Prem
- CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-54309CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allowsCrushFTP
- CVE-2025-6558Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiallGoogle Chrome