CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 100%CVE-2025-49706· updated Nov 8
On 2025-07-22, CISA added CVE-2025-49706 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
41 results
On 2025-07-22, CISA added CVE-2025-49706 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-22, CISA added CVE-2025-49704 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On July 20, 2025, CISA added CVE-2025-53770 ('ToolShell') in on-premises Microsoft SharePoint to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-28, CISA added CVE-2025-1976 (Broadcom Brocade Fabric OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-04, CISA added CVE-2025-22226 (VMware ESXi, Workstation, and Fusion) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-03-04, CISA added CVE-2025-22225 (VMware ESXi) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-03-04, CISA added CVE-2025-22224 (VMware ESXi and Workstation) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-11-20, CISA added CVE-2024-38813 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-20, CISA added CVE-2024-38812 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-22, CISA added CVE-2024-38094 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-09-18, CISA added CVE-2020-0618 (Microsoft SQL Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-08-21, CISA added CVE-2021-31196 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-30, CISA added CVE-2024-37085 (VMware ESXi) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-17, CISA added CVE-2022-22948 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-05-14, CISA added CVE-2024-30051 (Microsoft DWM Core Library) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-05-01, CISA added CVE-2023-7028 (GitLab GitLab CE/EE) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-26, CISA added CVE-2023-24955 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-15, CISA added CVE-2024-21410 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-22, CISA added CVE-2023-34048 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .