Skip to content

Patch first Vendors Added Changes Method

Home
Added
August 2025

CISA's list that month

August 2025

In August 2025 CISA added 15 vulnerabilities to its list of exploited vulnerabilities, on 8 days.

5 August 2025

3 added

CVE-2020-25078
CVE-2020-25079
CVE-2022-40799

12 August 2025

3 added

CVE-2007-0671
CVE-2013-3893
CVE-2025-8088

13 August 2025

2 added

CVE-2025-8875
CVE-2025-8876

18 August 2025

1 added

CVE-2025-54948

21 August 2025

1 added

CVE-2025-43300

25 August 2025

3 added

CVE-2024-8068
CVE-2024-8069
CVE-2025-48384

26 August 2025

1 added

CVE-2025-7775

29 August 2025

1 added

CVE-2025-57819

← July 2025Every monthSeptember 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com