cvegen

july 2025

cves
3,774
against an average 2025 month
0.9×
busiest day
jul 8, 438
used in real attacks
14

july 2025 brought 3,774 cves, close to an average 2025 month.

7 of its 31 days ran above the 2025 average for that weekday.

438

on jul 8, the busiest day.

391

rated critical, cvss 9 or higher. 323 of them can be hit over the network with no login and nothing for a user to click.

215

came in two single drops: the linux kernel team 114 on jul 25, zdi 101 on jul 21.

14 already used in real attacks

cisa kev, as of oct 24, 2026

  • 3
    microsoft sharepoint
    jul 8, 20
  • 2
    wing ftp server
    jul 10
  • 1
    git
    jul 8
  • 1
    google chromium
    jul 15
  • 1
    cisco identity services engine
    jul 16
  • 1
    fortinet fortiweb
    jul 17
  • 1
    laravel livewire
    jul 17
  • 1
    crushftp
    jul 18
  • 1
    prettier eslint-config-prettier
    jul 19
  • 1
    linux kernel
    jul 22
and 1 more productall 14 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
july 1 to 31, 2025
cves
3,774
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667