CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft system center data protection manager 2019, system center data protection manager 2022, system center data protection manager 2025 +17 more +19 moreMicrosoft System Center Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreNTFS Information Disclosure Vulnerability5.5 Medium
- microsoft office, office 2016 +1 moreMicrosoft Office Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreActive Directory Certificate Services Elevation of Privilege Vulnerability8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreKerberos Key Distribution Proxy Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Local Security Authority (LSA) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +4 more +6 moreWindows Update Stack Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Digital Media Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreHTTP.sys Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows server 2012, windows server 2012 (server core installation) +3 more +5 moreWindows Mark of the Web Security Feature Bypass Vulnerability5.4 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +7 more +9 moreWindows Standards-Based Storage Management Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Streaming Service Denial of Service Vulnerability5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Virtual Hard Disk Elevation of Privilege Vulnerability7.8 High
- microsoft 365 copilot, office for android, office for universal +36 more +38 moreWin32k Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows TCP/IP Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +7 more +9 moreWindows Standards-Based Storage Management Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWin32k Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows upnphost.dll Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.1 High
- shahjada live formsWordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability4.3 Medium
- broadstreet adsWordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- maennchen1.de m1.downloadlistWordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability6.5 Medium
- otwthemes widgetize pages lightWordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- elastic elasticsearchElasticsearch Vulnerable to Stack Overflow due to a Large Recursion4.9 Medium
- fortinet fortiswitchA unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote...9.3 Critical
- elastic kibanaAn issue has been identified where a specially crafted request sent to an Observability API could...6.5 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability6.5 Medium
shopware/corePackagist,shopware/platformPackagist +1 moreShopware Broken ACL on Document retrieval to access other customers documents4.0 Medium- shopwareShopware Vulnerable to Blind SQL-injection in DAL aggregations6.8 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreReflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface5.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreArbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor4.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface7.2 High
- joomla! project framework, joomla joomla\! +1 more[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package9.8 Critical
- Show moreLoading…