cvegen

february 2025

cves
3,673
against an average 2025 month
0.9×
busiest day
feb 26, 790
used in real attacks
15

february 2025 brought 3,673 cves, close to an average 2025 month.

6 of its 28 days ran above the 2025 average for that weekday.

790

on feb 26, the busiest day. the linux kernel team published 706 of them at once.

263

rated critical, cvss 9 or higher. 213 of them can be hit over the network with no login and nothing for a user to click.

952

came in three single drops: the linux kernel team 706 on feb 26, the linux kernel team 177 on feb 27, patchstack 69 on feb 3.

15 already used in real attacks

cisa kev, as of oct 24, 2026

  • 2
    advantive veracore
    feb 3
  • 2
    zyxel dsl cpe devices
    feb 4
  • 2
    microsoft windows
    feb 11
  • 2
    palo alto networks pan-os
    feb 12
  • 1
    digiever ds-2105 pro
    feb 3
  • 1
    trimble cityworks
    feb 6
  • 1
    apple ios and ipados
    feb 10
  • 1
    wazuh server
    feb 10
  • 1
    fortinet fortios and fortiproxy
    feb 11
  • 1
    microsoft power pages
    feb 19
and 1 more productall 15 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
february 1 to 28, 2025
cves
3,673
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667