cvegen

august 2025

cves
3,629
against an average 2025 month
0.9×
busiest day
aug 12, 353
used in real attacks
12

august 2025 brought 3,629 cves, close to an average 2025 month.

7 of its 31 days ran above the 2025 average for that weekday.

353

on aug 12, the busiest day. microsoft published 106 of them at once.

425

rated critical, cvss 9 or higher. 351 of them can be hit over the network with no login and nothing for a user to click.

378

came in three single drops: patchstack 154 on aug 14, patchstack 118 on aug 20, microsoft 106 on aug 12.

12 already used in real attacks

cisa kev, as of oct 24, 2026

  • 2
    dassault systèmes delmia apriso
    aug 4
  • 2
    n-able n-central
    aug 14
  • 1
    adobe experience manager forms
    aug 5
  • 1
    trend micro apex one
    aug 5
  • 1
    rarlab winrar
    aug 8
  • 1
    apple ios, ipados, and macos
    aug 21
  • 1
    citrix netscaler
    aug 26
  • 1
    sangoma freepbx
    aug 28
  • 1
    meta platforms whatsapp
    aug 29
  • 1
    tp-link multiple routers
    aug 29
all 12 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
august 1 to 31, 2025
cves
3,629
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667