CVEs published September 1 to September 7, 2025
992 CVEs were published Sep 1 to Sep 7, 2025, 60 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 992
- Critical
- 60
- Added to CISA KEV
- 7
- Busiest day
- Thu, Sep 4 (268)
- Quietest day
- Sun, Sep 7 (18)
- September 1, 202584 CVEs · 6 critical
- September 2, 2025138 CVEs · 10 critical
- September 3, 2025193 CVEs · 10 critical
- September 4, 2025268 CVEs · 15 critical
- September 5, 2025231 CVEs · 16 critical
- September 6, 202560 CVEs · 3 critical
- September 7, 202518 CVEs
Added to CISA KEV 7
- CVE-2020-24363TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request
- CVE-2025-55177Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25Facebook WhatsApp Desktop for Mac · Facebook WhatsApp Bu… +1
- CVE-2023-50224TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure VulnerabilityTP-Link TL-WR841N · TP-Link TL-WR841ND +20
- CVE-2025-9377Authenticated RCE via Parental Control command injectionTP-Link Systems Archer C7(EU) · TP-Link Systems TL-WR841N/N…
- CVE-2025-38352posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()Linux
- CVE-2025-48543In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free.Google Android
- CVE-2025-53690Sitecore Products ViewState Deserialization VulnerabilitySitecore Experience Manager · Sitecore Experience Platform