Zero-day report: October 2025
CISA added 31 exploited vulnerabilities to its catalog in October 2025, 15 more than September (16). 4 were zero-days, listed within a week of going public. 3 are known to be used by ransomware. The most-hit vendor was Microsoft, with 8.
By technology
Most-hit vendors
Every flaw added in October 2025
- XWiki · PlatformXWiki Platform Eval Injection Vulnerability
- VMware · VMware Aria Operations and VMware ToolsBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
- Dassault Systèmes · DELMIA AprisoDassault Systèmes DELMIA Apriso Code Injection Vulnerability
- Dassault Systèmes · DELMIA AprisoDassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
- Adobe · Commerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability
- Microsoft · WindowsMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- Motex · LANSCOPE Endpoint ManagerMotex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
- Apple · Multiple ProductsApple Multiple Products Unspecified Vulnerability
- Kentico · Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Kentico · Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Microsoft · WindowsMicrosoft Windows SMB Client Improper Access Control Vulnerability
- Oracle · E-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
- Adobe · Experience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability
- SKYSEA · Client ViewSKYSEA Client View Improper Authentication Vulnerability
- Microsoft · WindowsMicrosoft Windows Untrusted Pointer Dereference Vulnerability
- IGEL · IGEL OSIGEL OS Use of a Key Past its Expiration Date Vulnerability
- Microsoft · WindowsMicrosoft Windows Improper Access Control Vulnerability
- Grafana Labs · GrafanaGrafana Path Traversal Vulnerability
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
- Mozilla · Multiple ProductsMozilla Multiple Products Remote Code Execution Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability
- Microsoft · WindowsMicrosoft Windows Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Out-of-Bounds Write Vulnerability
- Linux · KernelLinux Kernel Heap Out-of-Bounds Write Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Oracle · E-Business SuiteOracle E-Business Suite Unspecified Vulnerability
- GNU · GNU BashGNU Bash OS Command Injection Vulnerability
- Juniper · ScreenOSJuniper ScreenOS Improper Authentication Vulnerability
- Jenkins · JenkinsJenkins Remote Code Execution Vulnerability
- Samsung · Mobile DevicesSamsung Mobile Devices Out-of-Bounds Write Vulnerability
- Smartbedded · MeteobridgeSmartbedded Meteobridge Command Injection Vulnerability
← September 2025November 2025 →
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.