Skip to content

Patch first Vendors Added Changes Method

Home
Added
June 2025

CISA's list that month

June 2025

In June 2025 CISA added 20 vulnerabilities to its list of exploited vulnerabilities, on 9 days.

2 June 2025

5 added

CVE-2021-32030
CVE-2023-39780
CVE-2024-56145
CVE-2025-3935
CVE-2025-35939

3 June 2025

3 added

CVE-2025-21479
CVE-2025-21480
CVE-2025-27038

5 June 2025

1 added

CVE-2025-5419

9 June 2025

2 added

CVE-2024-42009
CVE-2025-32433

10 June 2025

2 added

CVE-2025-24016
CVE-2025-33053

16 June 2025

2 added

CVE-2023-33538
CVE-2025-43200

17 June 2025

1 added

CVE-2023-0386

25 June 2025

3 added

CVE-2019-6693
CVE-2024-0769
CVE-2024-54085

30 June 2025

1 added

CVE-2025-6543

← May 2025Every monthJuly 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com