cvegen

march 2025

cves
4,001
against an average 2025 month
1.0×
busiest day
mar 27, 377
used in real attacks
26

march 2025 brought 4,001 cves, close to an average 2025 month.

6 of its 31 days ran above the 2025 average for that weekday.

377

on mar 27, the busiest day. patchstack published 166 of them at once.

396

rated critical, cvss 9 or higher. 363 of them can be hit over the network with no login and nothing for a user to click.

634

came in three single drops: @huntr 298 on mar 20, patchstack 170 on mar 3, patchstack 166 on mar 27.

26 already used in real attacks

cisa kev, as of oct 24, 2026

  • 7
    microsoft windows
    mar 11
  • 2
    kentico xperience cms
    mar 24
  • 1
    edimax ic-7100 ip camera
    mar 4
  • 1
    nakivo backup and replication
    mar 4
  • 1
    vmware esxi
    mar 4
  • 1
    vmware esxi and workstation
    mar 4
  • 1
    vmware esxi, workstation, and fusion
    mar 4
  • 1
    apache tomcat
    mar 10
  • 1
    ami megarac spx
    mar 11
  • 1
    apple products
    mar 11
and 9 more productsall 26 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
march 1 to 31, 2025
cves
4,001
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667