CISA's list that day
6 October 2025
On CISA added 7 vulnerabilities to its list of exploited vulnerabilities, in Mozilla Multiple Products, Microsoft Internet Explorer, Microsoft Windows and 2 other products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2010-3765Remote Code Execution | Mozilla Multiple Products | Patch this weekMetasploit module; EPSS 0.83; verified Exploit-DB entry | 0.83 | ||
| CVE-2010-3962Uninitialized Memory Corruption | Microsoft Internet Explorer | Patch this weekMetasploit module; EPSS 0.97; verified Exploit-DB entry | 0.97 | ||
| CVE-2013-3918Out-of-Bounds Write | Microsoft Windows | Patch this weekMetasploit module; EPSS 0.74; verified Exploit-DB entry | 0.74 | ||
| CVE-2021-22555Heap Out-of-Bounds Write | Linux Kernel | Patch this weekMetasploit module; EPSS 0.79; verified Exploit-DB entry | 0.79 | ||
| CVE-2011-3402Remote Code Execution | Microsoft Windows | Patch this weekMetasploit module; EPSS 0.78 | 0.78 | ||
| CVE-2025-61882Unspecified | Oracle E-Business Suite | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2021-43226Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.03 |
Other changes that day
- CVE-2025-61882 Oracle E-Business SuiteDeadline moved from 28 October 2025 to 27 October 2025. Listing date changed from 7 October 2025 to 6 October 2025.