CVEs published December 8 to December 14, 2025
1,733 CVEs were published Dec 8 to Dec 14, 2025, 121 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,733
- Critical
- 121
- Added to CISA KEV
- 7
- Busiest day
- Tue, Dec 9 (667)
- Quietest day
- Sun, Dec 14 (44)
- December 8, 2025245 CVEs · 10 critical
- December 9, 2025667 CVEs · 42 critical
- December 10, 2025261 CVEs · 31 critical
- December 11, 2025208 CVEs · 20 critical
- December 12, 2025226 CVEs · 10 critical
- December 13, 202582 CVEs · 7 critical
- December 14, 202544 CVEs · 1 critical
Added to CISA KEV 7
- CVE-2022-37055D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
- CVE-2025-66644Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.Array Networks ArrayOS AG
- CVE-2025-6218RARLAB WinRAR Directory Traversal Remote Code Execution VulnerabilityRARLAB WinRAR
- CVE-2025-62221Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58360GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap featuregeoserver · org.geoserver.web:gs-web-app +1
- CVE-2018-4063An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.Sierra Wireless
- CVE-2025-14174Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memoGoogle Chrome