November 2025 CVE Landscape: 10 Critical Vulnerabilities Show 69% Drop from October
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21042 | Out-of-Bounds Write RCE in Samsung Mobile Image Codec (libimagecodec.quram.so) | 9.8 | 36% | KEV | KEV |
| CVE-2025-58034 | Authenticated OS Command Injection RCE in Fortinet FortiWeb (active exploitation) | 7.2 | 55% | KEV | KEV |
| CVE-2025-62215 | Local Privilege Escalation via Race Condition in Microsoft Windows Kernel | 7.0 | 4% | KEVPoC | KEV |
| CVE-2025-64446 | Unauthenticated Path Traversal in Fortinet FortiWeb Enables Admin Command Execution | 9.8 | 91% | KEVPoC | KEV |
From the original article
5 min read at recordedfuture.com
November 2025 saw a significant 69% decrease in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 10 vulnerabilities requiring immediate attention, down from 32 in October .
By Insikt Group® · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.