CVEs published December 15 to December 21, 2025
1,263 CVEs were published Dec 15 to Dec 21, 2025, 115 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,263
- Critical
- 115
- Added to CISA KEV
- 7
- Busiest day
- Thu, Dec 18 (399)
- Quietest day
- Sat, Dec 20 (24)
- December 15, 2025149 CVEs · 16 critical
- December 16, 2025363 CVEs · 22 critical
- December 17, 2025188 CVEs · 29 critical
- December 18, 2025399 CVEs · 35 critical
- December 19, 2025110 CVEs · 11 critical
- December 20, 202524 CVEs · 2 critical
- December 21, 202530 CVEs
Added to CISA KEV 7
- CVE-2025-14611Gladinet CentreStack and TrioFox Hard Coded AES KeysGladinet CentreStack and TrioFox
- CVE-2025-43529A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-59718A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiFortinet FortiSwitchManager · Fortinet FortiOS +1
- CVE-2025-20393Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityCisco Secure Email
- CVE-2025-40602A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).SonicWall SMA1000
- CVE-2025-59374"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced throASUS live update
- CVE-2025-14733WatchGuard Firebox iked Out of Bounds Write VulnerabilityWatchGuard Fireware OS