CISA's list that day
10 June 2025
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Wazuh Server and Microsoft Windows. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-24016Deserialization of Untrusted Data | Wazuh Wazuh Server | Patch this weekMetasploit module; EPSS 0.94 | 0.94 | ||
| CVE-2025-33053External Control of File Name or Path | Microsoft Windows | Patch this weekMetasploit module; EPSS 0.87 | 0.87 |