CVEs published September 22 to September 28, 2025
1,061 CVEs were published Sep 22 to Sep 28, 2025, 46 of them critical. CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,061
- Critical
- 46
- Added to CISA KEV
- 3
- Busiest day
- Mon, Sep 22 (414)
- Quietest day
- Sun, Sep 28 (36)
- September 22, 2025414 CVEs · 10 critical
- September 23, 2025126 CVEs · 11 critical
- September 24, 2025125 CVEs · 10 critical
- September 25, 2025108 CVEs · 9 critical
- September 26, 2025199 CVEs · 5 critical
- September 27, 202553 CVEs · 1 critical
- September 28, 202536 CVEs
Added to CISA KEV 3
- CVE-2025-10585Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat DCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2025-20362Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…