Skip to content

Patch first Vendors Added Changes Method

Home
Added
March 2025

CISA's list that month

March 2025

In March 2025 CISA added 32 vulnerabilities to its list of exploited vulnerabilities, on 11 days.

3 March 2025

5 added

CVE-2018-8639
CVE-2022-43769
CVE-2022-43939
CVE-2023-20118
CVE-2024-4885

4 March 2025

4 added

CVE-2024-50302
CVE-2025-22224
CVE-2025-22225
CVE-2025-22226

10 March 2025

5 added

CVE-2024-13159
CVE-2024-13160
CVE-2024-13161
CVE-2024-57968
CVE-2025-25181

11 March 2025

6 added

CVE-2025-24983
CVE-2025-24984
CVE-2025-24985
CVE-2025-24991
CVE-2025-24993
CVE-2025-26633

13 March 2025

2 added

CVE-2025-21590
CVE-2025-24201

18 March 2025

2 added

CVE-2025-24472
CVE-2025-30066

19 March 2025

3 added

CVE-2017-12637
CVE-2024-48248
CVE-2025-1316

24 March 2025

1 added

CVE-2025-30154

26 March 2025

2 added

CVE-2019-9874
CVE-2019-9875

27 March 2025

1 added

CVE-2025-2783

31 March 2025

1 added

CVE-2024-20439

← February 2025Every monthApril 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com