CVEs published October 6 to October 12, 2025
861 CVEs were published Oct 6 to Oct 12, 2025, 56 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 861
- Critical
- 56
- Added to CISA KEV
- 9
- Busiest day
- Tue, Oct 7 (240)
- Quietest day
- Sun, Oct 12 (36)
- October 6, 2025114 CVEs · 14 critical
- October 7, 2025240 CVEs · 6 critical
- October 8, 2025102 CVEs · 9 critical
- October 9, 2025169 CVEs · 20 critical
- October 10, 2025124 CVEs · 4 critical
- October 11, 202576 CVEs · 3 critical
- October 12, 202536 CVEs
Added to CISA KEV 9
- CVE-2010-3765Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x bef
- CVE-2010-3962Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors relate
- CVE-2011-3402Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,
- CVE-2013-3918The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V
- CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACELinux Kernel
- CVE-2021-43226Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-61882Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).Oracle Concurrent Processing
- CVE-2025-27915An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.
- CVE-2021-43798Grafana path traversalgrafana · github.com/grafana/grafana