Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Oracle, Windows, Kentico, Apple flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsOct 21, 2025 · 14:10 UTC (Oct 21, 2025)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-48503 CVE-2025-2746 CVE-2025-2747 CVE-2025-33073 CVE-2025-61884 CVE-2025-61882

Tags: cve-2022-48503 cve-2025-2746 cve-2025-2747 cve-2025-33073 cve-2025-61884 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-48503	Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari	8.8	3%	KEV	Aug 14, 2023 KEV Oct 20, 2025
CVE-2025-2747 +1 related CVE CVE-2025-2746	Authentication Bypass in Kentico Xperience CMS Staging Sync Server	9.8	97%	KEVPoC	Mar 24, 2025 KEV Oct 20, 2025
CVE-2025-33073	Improper Access Control Privilege Escalation in Microsoft Windows SMB Client	8.8	83%	KEV	Jun 10, 2025 KEV Oct 20, 2025
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025
CVE-2025-61884	Unauthenticated SSRF in Oracle E-Business Suite Configurator	7.5	96%	KEVRansomwarePoC	Oct 12, 2025 KEV Oct 20, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle, Windows, Kentico, and Apple flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.