Skip to content

Patch first Vendors Added Changes Method

Home
Added
January 2025

CISA's list that month

January 2025

In January 2025 CISA added 14 vulnerabilities to its list of exploited vulnerabilities, on 8 days.

7 January 2025

3 added

CVE-2020-2883
CVE-2024-41713
CVE-2024-55550

8 January 2025

1 added

CVE-2025-0282

13 January 2025

2 added

CVE-2023-48365
CVE-2024-12686

14 January 2025

4 added

CVE-2024-55591
CVE-2025-21333
CVE-2025-21334
CVE-2025-21335

16 January 2025

1 added

CVE-2024-50603

23 January 2025

1 added

CVE-2020-11023

24 January 2025

1 added

CVE-2025-23006

29 January 2025

1 added

CVE-2025-24085

← December 2024Every monthFebruary 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com