KEV CATALOG March
KEV CATALOG 2026 H January(21) February(29) March(26) April(22) May(9) June(0) July(0) August(0) September(0) October(0) November(0) December(0)
DATE |
NAME |
Info |
CATEG. |
WEB |
|
|
Citrix NetScaler Out-of-Bounds Read Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-53521 | F5 BIG-IP Remote Code Execution Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-33634 | Aqua Security Trivy Embedded Malicious Code Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-33017 | Langflow Code Injection Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-31277 | Apple Multiple Products Buffer Overflow Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-32432 | Craft CMS Code Injection Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-43510 | Apple Multiple Products Improper Locking Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-43520 | Apple Multiple Products Classic Buffer Overflow Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-54068 | Laravel Livewire Code Injection Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-20963 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-47813 | Wing FTP Server Information Disclosure Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-3909 | Google Skia Out-of-Bounds Write Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-3910 | Google Chromium V8 Unspecified Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-68613 | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2017-7921 | Hikvision Multiple Products Improper Authentication Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2021-22681 | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2021-30952 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2023-41974 | Apple iOS and iPadOS Use-After-Free Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2023-43000 | Apple Multiple products Use-After-Free Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability |
VULNEREBILITY |
VULNEREBILITY |
|
| CVE-2026-22719 | Broadcom VMware Aria Operations Command Injection Vulnerability |
VULNEREBILITY |
VULNEREBILITY |