cvegen

january 2025

cves
4,273
against an average 2025 month
1.1×
busiest day
jan 14, 479
used in real attacks
17

january 2025 brought 4,273 cves, close to an average 2025 month.

11 of its 31 days ran above the 2025 average for that weekday.

479

on jan 14, the busiest day. microsoft published 157 of them at once.

378

rated critical, cvss 9 or higher. 274 of them can be hit over the network with no login and nothing for a user to click.

557

came in three single drops: patchstack 209 on jan 16, patchstack 191 on jan 2, microsoft 157 on jan 14.

17 already used in real attacks

cisa kev, as of oct 24, 2026

  • 3
    ivanti endpoint manager
    jan 14
  • 3
    microsoft windows
    jan 14
  • 3
    simplehelp
    jan 15
  • 1
    aviatrix controllers
    jan 8
  • 1
    ivanti connect secure, policy secure, and zta gateways
    jan 8
  • 1
    sonicwall sonicos
    jan 9
  • 1
    fortinet fortios and fortiproxy
    jan 14
  • 1
    craft cms
    jan 18
  • 1
    sonicwall sma1000 appliances
    jan 23
  • 1
    7-zip
    jan 25
and 1 more productall 17 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
january 1 to 31, 2025
cves
4,273
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667