CVEs published October 20 to October 26, 2025
856 CVEs were published Oct 20 to Oct 26, 2025, 76 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 856
- Critical
- 76
- Added to CISA KEV
- 8
- Busiest day
- Wed, Oct 22 (389)
- Quietest day
- Sun, Oct 26 (6)
- October 20, 202579 CVEs · 11 critical
- October 21, 2025147 CVEs · 12 critical
- October 22, 2025389 CVEs · 32 critical
- October 23, 202597 CVEs · 6 critical
- October 24, 202599 CVEs · 9 critical
- October 25, 202539 CVEs · 4 critical
- October 26, 20256 CVEs · 2 critical
Added to CISA KEV 8
- CVE-2022-48503The issue was addressed with improved bounds checks.Apple macOS · Apple tvOS +3
- CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication BypassKentico Xperience
- CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication BypassKentico Xperience
- CVE-2025-33073Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-61884Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI).Oracle Configurator
- CVE-2025-61932Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, MOTEX Lanscope Endpoint Manager (On-Premises) (Client progr…
- CVE-2025-54236Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce · magento/community-edition +1
- CVE-2025-59287Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityMicrosoft Windows Server