| CVE-2025-59287 | CVE-2025-59287: Critical Vulnerability in Microsoft Windows Server Update Service | CRITICAL | Insecure Deserialization | Windows Server 2012 | Yes | Oct 14, 2025 |
| CVE-2025-55315 | CVE-2025-55315: Critical Vulnerability in Microsoft ASP.NET Core | CRITICAL | Other | Asp.Net Core | Yes | Oct 14, 2025 |
| CVE-2025-49708 | CVE-2025-49708: Critical Vulnerability in Microsoft Windows | CRITICAL | Use After Free | Windows 10 1809 | -- | Oct 14, 2025 |
| CVE-2025-61882 | CVE-2025-61882: Critical Vulnerability in Oracle Concurrent Processing | CRITICAL | Authentication Bypass | Concurrent Processing | Yes | Oct 5, 2025 |
| CVE-2025-49844 | CVE-2025-49844: Critical Vulnerability in lfprojects Redis | CRITICAL | Use After Free | Redis | Yes | Oct 3, 2025 |
| CVE-2025-10725 | CVE-2025-10725: Critical Vulnerability in Red Hat Openshift AI Service | CRITICAL | Other | — | -- | Sep 30, 2025 |
| CVE-2024-13150 | CVE-2024-13150: Critical Vulnerability in Fayton Software fayton.Pro ERP | CRITICAL | SQL Injection | — | -- | Sep 29, 2025 |
| CVE-2025-20363 | CVE-2025-20363: Critical Vulnerability in Cisco IOS and Adaptive Security Appliance Software | CRITICAL | Heap Buffer Overflow | Adaptive Security Appliance Software | -- | Sep 25, 2025 |
| CVE-2025-20333 | CVE-2025-20333: Critical Vulnerability in Cisco Secure Firewall Adaptive Security Appliance | CRITICAL | Buffer Overflow | Adaptive Security Appliance Software | -- | Sep 25, 2025 |
| CVE-2025-10890 | CVE-2025-10890: Critical Vulnerability in Google Chrome | CRITICAL | Information Disclosure | Chrome | -- | Sep 24, 2025 |
| CVE-2025-10585 | CVE-2025-10585: Critical Vulnerability in Google Chrome | CRITICAL | Other | Chrome | Yes | Sep 24, 2025 |
| CVE-2025-26399 | CVE-2025-26399: Critical Vulnerability in SolarWinds Web Help Desk | CRITICAL | Insecure Deserialization | Web Help Desk | Yes | Sep 23, 2025 |
| CVE-2025-48703 | CVE-2025-48703: Critical Vulnerability in Control Web Panel | CRITICAL | Command Injection | Webpanel | Yes | Sep 19, 2025 |
| CVE-2025-10035 | CVE-2025-10035: Critical Vulnerability in Fortra GoAnywhere MFT | CRITICAL | Command Injection | Goanywhere Managed File Transfer | Yes | Sep 18, 2025 |
| CVE-2025-9242 | CVE-2025-9242: Critical Vulnerability in WatchGuard Fireware | CRITICAL | Out-of-bounds Write | Fireware | Yes | Sep 17, 2025 |
| CVE-2025-41243 | CVE-2025-41243: Critical Vulnerability in Spring Cloud Gateway Server Webflux | CRITICAL | Code Injection | — | Yes | Sep 16, 2025 |
| CVE-2025-54236 | CVE-2025-54236: Critical Vulnerability in Adobe Commerce and Magento | CRITICAL | Input Validation | Commerce | Yes | Sep 9, 2025 |
| CVE-2025-42944 | CVE-2025-42944: Critical Vulnerability in SAP NetWeaver | CRITICAL | Insecure Deserialization | — | Yes | Sep 9, 2025 |
| CVE-2025-55241 | CVE-2025-55241: Critical Vulnerability in Microsoft Entra ID | CRITICAL | Authentication Bypass | Entra Id | -- | Sep 4, 2025 |
| CVE-2025-55190 | CVE-2025-55190: Critical Vulnerability in Argoproj Argo CD | CRITICAL | Information Disclosure | Argo Cd | -- | Sep 4, 2025 |