Zero-day report: January 2025
CISA added 14 exploited vulnerabilities to its catalog in January 2025, 2 fewer than December (16). 7 were zero-days, listed within a week of going public. 6 are known to be used by ransomware. The most-hit vendor was Microsoft, with 3.
By technology
Most-hit vendors
Every flaw added in January 2025
- Apple · Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
- SonicWall · SMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization Vulnerability
- JQuery · JQueryJQuery Cross-Site Scripting (XSS) Vulnerability
- Aviatrix · ControllersAviatrix Controllers OS Command Injection Vulnerability
- Fortinet · FortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Microsoft · WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
- Microsoft · WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Qlik · SenseQlik Sense HTTP Tunneling Vulnerability
- BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
- Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
- Oracle · WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- Mitel · MiCollabMitel MiCollab Path Traversal Vulnerability
- Mitel · MiCollabMitel MiCollab Path Traversal Vulnerability
← December 2024February 2025 →
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.