Skip to content

Patch first Vendors Added Changes Method

Home
Added
October 2025

CISA's list that month

October 2025

In October 2025 CISA added 32 vulnerabilities to its list of exploited vulnerabilities, on 11 days.

2 October 2025

5 added

CVE-2014-6278
CVE-2015-7755
CVE-2017-1000353
CVE-2025-4008
CVE-2025-21043

6 October 2025

7 added

CVE-2010-3765
CVE-2010-3962
CVE-2011-3402
CVE-2013-3918
CVE-2021-22555
CVE-2021-43226
CVE-2025-61882

7 October 2025

1 added

CVE-2025-27915

8 October 2025

4 changes

9 October 2025

1 added

CVE-2021-43798

14 October 2025

5 added

CVE-2016-7836
CVE-2025-6264
CVE-2025-24990
CVE-2025-47827
CVE-2025-59230

15 October 2025

1 added

CVE-2025-54253

20 October 2025

5 added

CVE-2022-48503
CVE-2025-2746
CVE-2025-2747
CVE-2025-33073
CVE-2025-61884

21 October 2025

1 change

22 October 2025

1 added

CVE-2025-61932

24 October 2025

2 added

CVE-2025-54236
CVE-2025-59287

28 October 2025

2 added

CVE-2025-6204
CVE-2025-6205

29 October 2025

1 change

30 October 2025

2 added

CVE-2025-24893
CVE-2025-41244

← September 2025Every monthNovember 2025 →

Sources and licence

CISA Known Exploited Vulnerabilities catalog. Not affiliated with or endorsed by CISA (source). Licence: CC0 1.0 Universal

Our text and compilation: CC BY 4.0. How to reuse and cite this page.

On this site

Patch first
Used in ransomware
Exploited, low EPSS
Likely next
Vendors
Added by day
Changes
Statistics
Federal deadlines
Methodology
Sources
About
Corrections
Privacy
Licence and reuse

Every vulnerability CISA lists as exploited, ranked by what to patch first with an open method, with EPSS scores, public exploits, US federal deadlines and the changes CISA's list does not keep.

whattopatch is independent and not affiliated with or endorsed by CISA, FIRST or MITRE. Our patch-first rank is our own reading of public data, not advice for your systems.

Corrections and questions: hello@whattopatch.com