CISA's list that day
12 December 2025
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Sierra Wireless AirLink ALEOS and Google Chromium. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2018-4063Unrestricted Upload of File with Dangerous Type | Sierra Wireless AirLink ALEOS | Patch soon | 0.27 | ||
| CVE-2025-14174Out of Bounds Memory Access | Google Chromium | Patch soon | 0.22 |