Changes in December 2025

In CISA made 21 changes to its list that its own file does not keep.

  1. CVE-2024-53704 SonicWall SonicOSRansomware use: Unknown to Known.
  2. CVE-2025-20393 Cisco Multiple ProductsEdited: notes.
  3. CVE-2021-34527 Microsoft WindowsDeadline moved from 20 July 2021 to 3 May 2022.
  4. CVE-2021-27065 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  5. CVE-2021-26858 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  6. CVE-2021-26857 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  7. CVE-2021-26855 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  8. CVE-2021-22900 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  9. CVE-2021-22899 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  10. CVE-2021-22894 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  11. CVE-2021-22893 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  12. CVE-2020-8260 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  13. CVE-2020-8243 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  14. CVE-2020-1472 Microsoft NetlogonDeadline moved from 21 September 2020 to 3 May 2022.
  15. CVE-2020-1350 Microsoft WindowsDeadline moved from 24 July 2020 to 3 May 2022.
  16. CVE-2020-0601 Microsoft WindowsDeadline moved from 29 January 2020 to 3 May 2022.
  17. CVE-2019-11510 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  18. CVE-2025-55182 Meta React Server ComponentsRansomware use: Unknown to Known.
  19. CVE-2025-55182 Meta React Server ComponentsEdited: notes and description.
  20. CVE-2025-55182 Meta React Server ComponentsDeadline moved from 26 December 2025 to 12 December 2025. Edited: notes.
  21. CVE-2024-40766 SonicWall SonicOSEdited: notes.