CISA's list that day

13 May 2025

On CISA added 5 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2025-30397Scripting Engine Type ConfusionMicrosoft WindowsPatch soon0.27
CVE-2025-32706Common Log File System (CLFS) Driver Heap-Based Buffer OverflowMicrosoft WindowsPatch soon0.02
CVE-2025-32709Ancillary Function Driver for WinSock Use-After-FreeMicrosoft WindowsPatch soon0.02
CVE-2025-30400DWM Core Library Use-After-FreeMicrosoft WindowsPatch soon0.02
CVE-2025-32701Common Log File System (CLFS) Driver Use-After-FreeMicrosoft WindowsPatch soon0.01

Other changes that day

  1. CVE-2021-43890 Microsoft WindowsRansomware use: Unknown to Known.
  2. CVE-2022-2294 WebRTCRansomware use: Unknown to Known.
  3. CVE-2022-21999 Microsoft WindowsRansomware use: Unknown to Known.