CISA's list that day
4 September 2025
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Linux Kernel, Android Runtime and Sitecore Multiple Products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-53690Deserialization of Untrusted Data | Sitecore Multiple Products | Patch this weekEPSS 0.51 | 0.51 | ||
| CVE-2025-38352Time-of-Check Time-of-Use (TOCTOU) Race Condition | Linux Kernel | Patch soon | 0.01 | ||
| CVE-2025-48543Use-After-Free | Android Runtime | Patch soon | 0.01 |