Zero-day report: February 2025
CISA added 27 exploited vulnerabilities to its catalog in February 2025, 13 more than January (14). 8 were zero-days, listed within a week of going public. 3 are known to be used by ransomware. The most-hit vendor was Microsoft, with 6.
By technology
Most-hit vendors
Every flaw added in February 2025
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
- Microsoft · Partner CenterMicrosoft Partner Center Improper Access Control Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Deserialization Vulnerability
- Oracle · Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
- Microsoft · Power PagesMicrosoft Power Pages Improper Access Control Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS File Read Vulnerability
- Craft CMS · Craft CMSCraft CMS Code Injection Vulnerability
- SonicWall · SonicOSSonicWall SonicOS SSLVPN Improper Authentication Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability
- SimpleHelp · SimpleHelpSimpleHelp Path Traversal Vulnerability
- Mitel · SIP PhonesMitel SIP Phones Argument Injection Vulnerability
- Apple · iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability
- Zyxel · DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- Zyxel · DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- Microsoft · WindowsMicrosoft Windows Storage Link Following Vulnerability
- Microsoft · WindowsMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
- Trimble · CityworksTrimble Cityworks Deserialization Vulnerability
- Sophos · XG FirewallSophos XG Firewall Buffer Overflow Vulnerability
- Sophos · CyberoamOSCyberoamOS (CROS) SQL Injection Vulnerability
- Audinate · Dante DiscoveryDante Discovery Process Control Vulnerability
- Microsoft · Office OutlookMicrosoft Outlook Improper Input Validation Vulnerability
- 7-Zip · 7-Zip7-Zip Mark of the Web Bypass Vulnerability
- Linux · KernelLinux Kernel Out-of-Bounds Write Vulnerability
- Paessler · PRTG Network MonitorPaessler PRTG Network Monitor Local File Inclusion Vulnerability
- Paessler · PRTG Network MonitorPaessler PRTG Network Monitor OS Command Injection Vulnerability
- Microsoft · .NET FrameworkMicrosoft .NET Framework Information Disclosure Vulnerability
- Apache · OFBizApache OFBiz Forced Browsing Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.