# january 2025

> markdown for agents. every page and download is listed in [llms.txt](https://cvegen.art/llms.txt).

![drybrush poster for january 2025, painted from 4,273 published cves](https://media.cvegen.art/posters/2025-01/1280.jpg?v=040601207b)

what the poster shows: 31 days as bands of dry brush, the first day at the top. 11 ran above the 2025 average for their weekday and sweep fast and wide; the other 20 are slow, level strokes. two inks: the deep one for open-source packages, enterprise vendors, the linux kernel, browsers and ai software, the pale one for everything else.

the poster being painted, a 12 second film: [mp4](https://media.cvegen.art/films/2025-01.mp4?v=56f93e25c2)

| fact | value |
| --- | --- |
| cves | 4,273 |
| against an average 2025 month | 1.1× |
| busiest day | jan 14, 479 |
| rated critical, cvss 9 or higher | 378 |
| critical with no login and no click | 274 |
| used in real attacks | 17 |

## january 2025 in numbers

january 2025 brought 4,273 cves, close to an average 2025 month. 11 of its 31 days ran above the 2025 average for that weekday.

- 479 on jan 14, the busiest day. microsoft published 157 of them at once.
- 378 rated critical, cvss 9 or higher. 274 of them can be hit over the network with no login and nothing for a user to click.
- 557 came in three single drops: patchstack 209 on jan 16, patchstack 191 on jan 2, microsoft 157 on jan 14.

## 17 already used in real attacks

cisa kev, as of oct 24, 2026.

### by product

- 3 ivanti endpoint manager, jan 14
- 3 microsoft windows, jan 14
- 3 simplehelp, jan 15
- 1 aviatrix controllers, jan 8
- 1 ivanti connect secure, policy secure, and zta gateways, jan 8
- 1 sonicwall sonicos, jan 9
- 1 fortinet fortios and fortiproxy, jan 14
- 1 craft cms, jan 18
- 1 sonicwall sma1000 appliances, jan 23
- 1 7-zip, jan 25
- 1 apple products, jan 27

### every cve

- jan 8, aviatrix controllers, [cve-2024-50603](https://www.cve.org/CVERecord?id=CVE-2024-50603)
- jan 8, ivanti connect secure, policy secure, and zta gateways, [cve-2025-0282](https://www.cve.org/CVERecord?id=CVE-2025-0282)
- jan 9, sonicwall sonicos, [cve-2024-53704](https://www.cve.org/CVERecord?id=CVE-2024-53704)
- jan 14, ivanti endpoint manager (epm), [cve-2024-13159](https://www.cve.org/CVERecord?id=CVE-2024-13159)
- jan 14, ivanti endpoint manager (epm), [cve-2024-13160](https://www.cve.org/CVERecord?id=CVE-2024-13160)
- jan 14, ivanti endpoint manager (epm), [cve-2024-13161](https://www.cve.org/CVERecord?id=CVE-2024-13161)
- jan 14, fortinet fortios and fortiproxy, [cve-2024-55591](https://www.cve.org/CVERecord?id=CVE-2024-55591)
- jan 14, microsoft windows, [cve-2025-21333](https://www.cve.org/CVERecord?id=CVE-2025-21333)
- jan 14, microsoft windows, [cve-2025-21334](https://www.cve.org/CVERecord?id=CVE-2025-21334)
- jan 14, microsoft windows, [cve-2025-21335](https://www.cve.org/CVERecord?id=CVE-2025-21335)
- jan 15, simplehelp simplehelp, [cve-2024-57726](https://www.cve.org/CVERecord?id=CVE-2024-57726)
- jan 15, simplehelp simplehelp, [cve-2024-57727](https://www.cve.org/CVERecord?id=CVE-2024-57727)
- jan 15, simplehelp simplehelp, [cve-2024-57728](https://www.cve.org/CVERecord?id=CVE-2024-57728)
- jan 18, craft cms craft cms, [cve-2025-23209](https://www.cve.org/CVERecord?id=CVE-2025-23209)
- jan 23, sonicwall sma1000 appliances, [cve-2025-23006](https://www.cve.org/CVERecord?id=CVE-2025-23006)
- jan 25, 7-zip 7-zip, [cve-2025-0411](https://www.cve.org/CVERecord?id=CVE-2025-0411)
- jan 27, apple multiple products, [cve-2025-24085](https://www.cve.org/CVERecord?id=CVE-2025-24085)

cisa keeps adding older cves when attacks come to light, so this list can still grow.

## this poster

| fact | value |
| --- | --- |
| period | january 1 to 31, 2025 |
| cves | 4,273 |
| data | cve list v5, cisa kev, drawn 2026-10-24 |
| format | 3:4, drawn for 45 × 60 cm |

[download jpg, 2000 × 2667](https://media.cvegen.art/posters/2025-01/2000.jpg?v=040601207b)

## other months

- after: [february 2025](https://cvegen.art/2025/02.md), 3,673 cves
- [all months](https://cvegen.art/index.md)